Web Programming Website And Web Server Programming 4

Question 1

Which header in an HTTP response tells the browser how long to cache the response before revalidating?

Accepted Answer

Cache-Control

Answer

Cache-Control with directives like max-age=3600 is the modern standard for controlling caching behavior in both browsers and proxies.

Question 2

In Express.js (Node.js), what does middleware do?

Accepted Answer

Intercepts requests and responses to execute code before the route handler

Answer

Express middleware functions have access to req, res, and next, allowing them to modify requests/responses or terminate the cycle.

Question 3

What is the difference between authentication and authorization in web server security?

Accepted Answer

Authentication verifies identity; authorization determines what actions that identity can perform

Answer

Authentication answers 'who are you?' while authorization answers 'what are you allowed to do?' — they are distinct security concerns.

Question 4

Which server-side technique prevents a website from being embedded in an iframe on other domains to stop clickjacking attacks?

Accepted Answer

Setting the X-Frame-Options header to DENY or SAMEORIGIN

Answer

X-Frame-Options (or the Content-Security-Policy frame-ancestors directive) instructs browsers not to render the page inside a frame from unauthorized origins.

Question 5

In a PHP application, what is the risk of using `eval()` with user-supplied input?

Accepted Answer

It executes arbitrary PHP code, allowing remote code execution attacks

Answer

eval() runs a string as PHP code, so passing unsanitized user input to it lets attackers execute any server-side code they want.

Web Programming Practice Test

Web Programming Practice Test

Web Programming Website And Web Server Programming 4