Spring Framework Spring Security & Testing

Question 1

What is the default login URL provided by Spring Security's form login feature?

Accepted Answer

/login

Answer

Spring Security auto-generates a /login page when form login is enabled and no custom login page is configured.

Question 2

Which annotation enables Spring Security's method-level security?

Accepted Answer

@EnableMethodSecurity

Answer

@EnableMethodSecurity (Spring Security 5.6+) activates method-level annotations like @PreAuthorize, @PostAuthorize, and @Secured.

Question 3

What does the @PreAuthorize annotation do in Spring Security?

Accepted Answer

Evaluates a SpEL expression before a method is invoked to check authorization

Answer

@PreAuthorize evaluates a Spring Expression Language (SpEL) authorization expression before the target method executes, denying access if it returns false.

Question 4

In Spring Security, what is a GrantedAuthority?

Accepted Answer

A permission or role assigned to a user

Answer

GrantedAuthority represents a permission or role (e.g., ROLE_ADMIN) granted to a principal, used in access control decisions.

Question 5

What Spring Security class is used to encode passwords before storing them?

Accepted Answer

PasswordEncoder

Answer

PasswordEncoder is the interface Spring Security uses for one-way password encoding; BCryptPasswordEncoder is the recommended implementation.

Spring Framework Practice Test

Spring Framework Practice Test

Spring Framework Spring Security & Testing