Front End Development Risk Assessment & Management 5

Question 1

Which front-end testing type provides the MOST direct risk coverage for a complete user checkout flow spanning multiple components?

Accepted Answer

End-to-end (E2E) tests simulating the full browser interaction

Answer

E2E tests exercise the entire user journey in a real or headless browser, catching integration gaps that unit or snapshot tests miss.

Question 2

A Content Security Policy (CSP) header is primarily used to mitigate which class of front-end attack?

Accepted Answer

Cross-site scripting (XSS)

Answer

CSP restricts which scripts, styles, and resources the browser may execute, blocking many XSS payloads even if injection occurs.

Question 3

Technical debt in a front-end codebase is best classified as which type of risk?

Accepted Answer

Internal operational risk

Answer

Technical debt is an internally generated risk that increases the probability of defects, slower delivery, and system failure over time.

Question 4

A team ships a breaking change to a shared component library used by five product teams simultaneously. Which risk management practice would have best prevented the outage?

Accepted Answer

Semantic versioning with a deprecation period and consumer communication before removal

Answer

Semantic versioning communicates breaking changes via major version bumps and a migration window, allowing consumers to upgrade on their own schedule.

Question 5

An application renders user-supplied HTML directly using `innerHTML`. The MOST appropriate risk control is:

Accepted Answer

Sanitize HTML using a trusted library (e.g., DOMPurify) before insertion

Answer

DOMPurify and similar libraries strip dangerous tags and attributes from HTML before it touches the DOM, preventing XSS.

Front End Development Practice Test

Front End Development Practice Test

Front End Development Risk Assessment & Management 5