Spring Framework Spring Security & Testing

Question 1

What is the default login URL provided by Spring Security's form login feature?

Accepted Answer

/login

Answer

/auth/login

Answer

/spring/login

Answer

/user/login

Question 2

Which annotation enables Spring Security's method-level security?

Accepted Answer

@EnableMethodSecurity

Answer

@EnableGlobalSecurity

Answer

@EnableWebSecurity

Answer

@EnableSecureMethods

Question 3

What does the @PreAuthorize annotation do in Spring Security?

Accepted Answer

Evaluates a SpEL expression before a method is invoked to check authorization

Answer

Encrypts method parameters before execution

Answer

Pre-fetches user credentials from the database

Answer

Caches method results for authorized users

Question 4

In Spring Security, what is a GrantedAuthority?

Accepted Answer

A permission or role assigned to a user

Answer

An OAuth2 access token

Answer

An authentication provider

Answer

A CSRF protection token

Question 5

What Spring Security class is used to encode passwords before storing them?

Accepted Answer

PasswordEncoder

Answer

BCryptEncoder

Answer

PasswordHasher

Answer

CryptoService

Question 6

What HTTP status does Spring Security return by default when an unauthenticated user accesses a protected resource?

Accepted Answer

302 Redirect to login

Answer

403 Forbidden

Answer

404 Not Found

Answer

401 Unauthorized