Front End Development Risk Assessment & Management 4

Question 1

A single-page application stores the user's JWT in localStorage. What is the PRIMARY security risk?

Accepted Answer

Any XSS attack can read and exfiltrate the token

Answer

localStorage is accessible via JavaScript, so a successful XSS attack can steal the token and hijack the user's session.

Question 2

A risk is rated HIGH probability but LOW impact. What is typically the recommended response?

Accepted Answer

Monitor it regularly but avoid spending major resources on mitigation

Answer

High-probability, low-impact risks warrant monitoring and lightweight controls rather than costly mitigation efforts.

Question 3

Subresource Integrity (SRI) checks on third-party script tags help mitigate which front-end risk?

Accepted Answer

Serving of a tampered or hijacked third-party file

Answer

SRI hashes verify that the fetched file exactly matches the expected content, blocking execution if the CDN-hosted file has been compromised.

Question 4

Which practice is most effective for identifying accessibility risks before a front-end release?

Accepted Answer

Running automated accessibility audits (e.g., axe) plus manual screen-reader testing

Answer

Automated tools catch roughly 30–40% of issues, and manual testing with assistive technology covers the remainder of real-world accessibility risks.

Question 5

Your team is about to migrate from a legacy CSS framework to a new one across 200 components. The HIGHEST risk you should plan for is:

Accepted Answer

Visual regressions across components that break the UI for end users

Answer

Wide-scope CSS migrations frequently introduce subtle visual regressions that are hard to catch without screenshot-based regression testing.

Front End Development Practice Test