NestJS Risk Assessment & Management 2

Question 1

In a NestJS application, which built-in utility validates and transforms incoming request payloads to reduce data-integrity risks?

Accepted Answer

ValidationPipe

Answer

ValidationPipe leverages class-validator and class-transformer to automatically validate DTOs, preventing malformed data from reaching business logic.

Question 2

Which NestJS feature should you enable to mitigate the risk of exposing sensitive properties in API responses?

Accepted Answer

Response serialization via ClassSerializerInterceptor

Answer

ClassSerializerInterceptor uses @Exclude() and @Expose() decorators from class-transformer to strip sensitive fields before sending responses.

Question 3

A NestJS service depends on an external API. Which pattern best manages the risk of cascading failures when that API is unavailable?

Accepted Answer

Circuit breaker pattern

Answer

A circuit breaker stops forwarding requests to a failing dependency after a threshold, preventing resource exhaustion and cascading failures.

Question 4

When using NestJS with TypeORM, what risk does enabling synchronize: true in production introduce?

Accepted Answer

Automatic schema changes can silently drop or alter columns, causing data loss

Answer

With synchronize: true, TypeORM auto-applies schema diffs on startup, which can destructively drop columns without any migration review.

Question 5

Which NestJS module configuration practice reduces the risk of secrets like database passwords being hard-coded in source code?

Accepted Answer

Using ConfigModule with environment variables and a .env file excluded from version control

Answer

ConfigModule reads secrets from environment variables, keeping credentials out of the codebase and away from version control.

NestJS Practice Test

NestJS Practice Test

NestJS Risk Assessment & Management 2