OWASP Vulnerabilities interview questions
Cross-Site Request Forgery (CSRF), Cross-Site Scripting (XSS), SQL Injection
64 questions with answers and explanations · 64 flashcards
Questions (page 2 of 2)
- How would you explain a potential risk of not using CSRF tokens in web applications in an interview?Multiple choiceMedium
- What does 'stateless' imply in the context of JWT?Multiple choiceEasy
- How would you explain a critical step in preventing stored XSS attacks in a Java-based web application in an interview?Multiple choiceHard
- Which aspect of the Spring Security Filter Chain is crucial for protecting against CSRF attacks?Multiple choiceHard
- What does the 'OR 1=1;--' SQL Injection payload typically achieve?Multiple choiceMedium
- Which part of a JWT ensures data integrity and authenticity?Multiple choiceMedium
- In a stateless JWT token, what does the Signature part ensure?Multiple choiceMedium
- Why is HTML encoding crucial in preventing stored XSS attacks?Multiple choiceHard
- Why do teams use parameterized queries in production code?Multiple choiceMedium
- Why does a JWT's 'alg' field matter in this design?Multiple choiceEasy
- How does the BCrypt Work Factor influence password hashing?Multiple choiceMedium
- Which Java class is commonly used to prevent SQL Injection by safely handling SQL queries?Multiple choiceMedium
- Why is it useful to salting passwords before hashing them?Multiple choiceMedium
- In Java, what is a potential downside of using BCrypt with a very high work factor?Multiple choiceHard