1. Which package prevents CSRF?
- A. csrf
- B. csurf
- C. secure-csrf
- D. protect
Correct: B
Explanation: csurf protects against CSRF.
60 Questions • 20 Seconds / Question
Correct: B
Explanation: csurf protects against CSRF.
Correct: A
Explanation: EJS is commonly used.
Correct: A
Explanation: CSRF is a security vulnerability.
Correct: C
Explanation: res.json() sends JSON.
Correct: B
Explanation: PUT is idempotent.
Correct: B
Explanation: req.query accesses query params.
Correct: B
Explanation: cors enables cross-origin requests.
Correct: C
Explanation: Error middleware has 4 arguments.
Correct: C
Explanation: Use try/catch and next.
Correct: B
Explanation: Express.js is a minimal web framework for Node.js.
Correct: C
Explanation: PATCH partially updates resource.
Correct: B
Explanation: Winston is logging library.
Correct: A
Explanation: Unhandled rejections may crash app.
Correct: C
Explanation: compression enables gzip.
Correct: A
Explanation: dotenv loads env vars.
Correct: A
Explanation: express.static serves static files.
Correct: D
Explanation: Sessions can be stored in many ways.
Correct: B
Explanation: res.render renders templates.
Correct: B
Explanation: req represents incoming request.
Correct: B
Explanation: app.post() handles POST requests.
Correct: A
Explanation: next() passes control.
Correct: C
Explanation: JSON is standard.
Correct: B
Explanation: helmet secures HTTP headers.
Correct: C
Explanation: Error middleware goes at end.
Correct: A
Explanation: REST APIs are stateless.
Correct: A
Explanation: req.headers holds headers.
Correct: B
Explanation: res.status sets status code.
Correct: C
Explanation: Express.js runs on Node.js.
Correct: A
Explanation: express.urlencoded parses form data.
Correct: B
Explanation: morgan logs HTTP requests.
Correct: B
Explanation: Content-Type defines data type.
Correct: A
Explanation: XSS is security vulnerability.
Correct: B
Explanation: express.Router creates router.
Correct: B
Explanation: module.exports exports router.
Correct: B
Explanation: Middleware executes between request and response.
Correct: B
Explanation: express() creates an app instance.
Correct: B
Explanation: res sends response to client.
Correct: A
Explanation: err represents error.
Correct: B
Explanation: Caching improves performance.
Correct: C
Explanation: app.listen() starts the server.
Correct: A
Explanation: Static files are frontend assets.
Correct: B
Explanation: npm install express installs Express.
Correct: D
Explanation: All can test Express APIs.
Correct: A
Explanation: cookie-parser parses cookies.
Correct: D
Explanation: All help scaling.
Correct: A
Explanation: Router groups routes.
Correct: D
Explanation: All are process managers.
Correct: C
Explanation: Route params use :id syntax.
Correct: B
Explanation: 201 means created.
Correct: C
Explanation: 400 means bad request.
Correct: C
Explanation: 500 means server error.
Correct: A
Explanation: express-session manages sessions.
Correct: B
Explanation: Validating input improves security.
Correct: B
Explanation: Separate routers improve maintainability.
Correct: A
Explanation: req.params accesses route params.
Correct: D
Explanation: Helmet and xss-clean protect.
Correct: B
Explanation: express.json parses JSON body.
Correct: C
Explanation: Both start the app.
Correct: C
Explanation: res.redirect redirects.
Correct: A
Explanation: app.get() handles GET requests.