MEAN MEAN Stack Security and Deployment

Question 1

What is JWT (JSON Web Token) and how is it used for authentication in a MEAN stack?

Accepted Answer

A self-contained token encoding user claims that Angular sends in Authorization headers for Express to verify

Answer

A session cookie stored in MongoDB for tracking user logins

Answer

A database encryption standard for storing passwords in MongoDB

Answer

A two-factor authentication protocol for Node.js APIs

Question 2

What is bcrypt used for in a Node.js Express application?

Accepted Answer

Hashing passwords with a salt before storing in MongoDB to protect against rainbow table attacks

Answer

Encrypting JWT tokens for secure transmission

Answer

Compressing MongoDB documents for storage efficiency

Answer

Generating secure random tokens for password reset

Question 3

What is Cross-Site Scripting (XSS) and how does Angular protect against it?

Accepted Answer

Injecting malicious scripts into web pages; Angular auto-sanitizes all data bound to templates by treating it as text

Answer

Forging HTTP requests with stolen credentials; Angular uses CSRF tokens

Answer

Intercepting network requests between Angular and Express

Answer

Accessing MongoDB directly from the browser

Question 4

What is CSRF (Cross-Site Request Forgery) and how is it mitigated in Express?

Accepted Answer

Tricks users into submitting requests they didn't intend; mitigated with CSRF tokens or SameSite cookies

Answer

Forges server responses to steal user data; mitigated with HTTPS

Answer

Injects scripts into server responses; mitigated with CSP headers

Answer

Brute-forces login endpoints; mitigated with rate limiting

Question 5

What is NoSQL injection and how can it occur in a MongoDB/Express application?

Accepted Answer

Sending malicious operators like $where or $gt in request bodies to manipulate MongoDB queries

Answer

Injecting SQL commands into MongoDB's aggregation pipeline

Answer

Overwriting MongoDB documents with XSS payloads

Answer

Flooding MongoDB with concurrent write operations

Question 6

What is the purpose of HTTPS in a MEAN stack deployment?

Accepted Answer

Encrypts all data in transit between Angular clients and the Express server, protecting credentials and JWTs

Answer

Speeds up data transmission using HTTP/2 compression

Answer

Enables WebSocket connections from Angular to Node.js

Answer

Allows Angular to make cross-origin requests to the API