Ruby on Rails Ruby on Rails Testing, Security & API Development 2

Question 1

What is the Rails Asset Pipeline used for?

Accepted Answer

Concatenating, minifying, and serving CSS/JS assets efficiently

Answer

The Asset Pipeline (Sprockets) concatenates and compresses JavaScript and CSS files, and handles asset fingerprinting for cache busting.

Question 2

How do you protect a Rails API endpoint so only authenticated users can access it?

Accepted Answer

By calling `before_action :authenticate_user!` or a custom auth callback

Answer

`before_action :authenticate_user!` (Devise) or a custom `before_action` method runs before the action to check authentication.

Question 3

What does `rails generate scaffold Post title:string body:text` create?

Accepted Answer

Model, migration, controller, views, and routes for full CRUD

Answer

The scaffold generator creates the full CRUD stack: model, migration, controller with all RESTful actions, views, and routes in one command.

Question 4

What gem is most commonly used for authentication in Rails applications?

Accepted Answer

Devise

Answer

Devise is the most widely used Rails authentication gem, providing sign-up, sign-in, password reset, and session management out of the box.

Question 5

In Rails, what is the purpose of environment variables stored in `.env` files?

Accepted Answer

Storing sensitive configuration like API keys outside of version control

Answer

.env files (used with the dotenv gem) store sensitive credentials and environment-specific config that should not be committed to source control.

Ruby on Rails Practice Test