React Native Regulatory Frameworks & Compliance 4

Question 1

Which HTTP security header should a React Native app's backend enable to prevent MIME-type sniffing attacks on API responses?

Accepted Answer

X-Content-Type-Options: nosniff

Answer

The X-Content-Type-Options: nosniff header prevents browsers and clients from interpreting responses as a different MIME type than declared.

Question 2

A React Native app targets users in Brazil. Which data protection law is equivalent to GDPR for Brazilian users?

Accepted Answer

LGPD

Answer

Brazil's Lei Geral de Proteção de Dados (LGPD) is the Brazilian general data protection law, effective since 2021, modeled after GDPR.

Question 3

Under Apple's App Store guidelines, apps that monetize user data or sell it to third-party data brokers are:

Accepted Answer

Prohibited

Answer

Apple's App Store Review Guidelines explicitly prohibit apps from monetizing user data by selling it to third-party data brokers or advertisers.

Question 4

What is the purpose of a Data Processing Agreement (DPA) in the context of a React Native app using a third-party analytics SDK?

Accepted Answer

To define processor responsibilities and data protection obligations under GDPR

Answer

A DPA is a GDPR-required contract between a data controller and processor that defines each party's data protection responsibilities.

Question 5

Which tool provided by Google helps React Native Android developers verify that their app complies with Play Store target API level requirements?

Accepted Answer

Play Console's Pre-launch report

Answer

Google Play's Pre-launch report automatically tests APKs on real devices and flags API-level compliance issues before the app goes live.

React Native Practice Test