NestJS Regulatory Frameworks & Compliance 3

Question 1

A NestJS app is PCI DSS in scope. Which transport configuration is mandatory for all cardholder data environments?

Accepted Answer

TLS 1.2 or higher with strong cipher suites

Answer

PCI DSS v4.0 requires TLS 1.2 minimum (TLS 1.3 preferred) and prohibits older SSL/TLS versions and weak cipher suites.

Question 2

Under GDPR Article 25 (Data Protection by Design), which NestJS DTO pattern best demonstrates compliance?

Accepted Answer

Using class-transformer with @Exclude() by default and @Expose() only on necessary fields

Answer

Excluding all properties by default and explicitly exposing only necessary ones enforces data minimization at the API boundary, a core Design by Default principle.

Question 3

Which NestJS approach satisfies ISO 27001 A.12.4.1 (Event Logging) for a production API?

Accepted Answer

Structured JSON logging with correlation IDs, timestamps, severity, and user identity piped to a SIEM

Answer

ISO 27001 A.12.4.1 requires comprehensive, structured event logs that can be correlated and analyzed; a SIEM integration enables centralized monitoring.

Question 4

A GDPR DPA requests a record of processing activities (RoPA). Which NestJS metadata annotation strategy best supports generating this report?

Accepted Answer

Adding custom @ProcessingActivity() decorators that document lawful basis and data categories per endpoint

Answer

Custom decorators that capture lawful basis and data categories per endpoint enable automated RoPA generation directly from code metadata.

Question 5

Which NestJS rate-limiting configuration best aligns with OWASP API Security Top 10 item API4:2023 (Unrestricted Resource Consumption)?

Accepted Answer

Global ThrottlerGuard with per-user limits and a sliding window algorithm

Answer

Per-user sliding-window throttling prevents resource exhaustion from authenticated abuse, which IP-only or static limits fail to address.

NestJS Practice Test

NestJS Practice Test

NestJS Regulatory Frameworks & Compliance 3