Multiple Choice Questions on Secure Web Form Development for High School Web Design

📚 Quick Study Guide

• 🔑 HTTPS: Always use HTTPS for secure data transmission. It encrypts data between the browser and the server.
• 🛡️ Input Validation: Validate all user inputs on both the client-side and server-side to prevent injection attacks.
• 🧱 Prepared Statements: Use prepared statements or parameterized queries to protect against SQL injection.
• 🍪 Secure Cookies: Set the `Secure` and `HttpOnly` flags on cookies to protect them from being accessed by non-HTTPS connections or client-side scripts.
• ⚙️ Cross-Site Scripting (XSS) Prevention: Sanitize user inputs to prevent XSS attacks. Encode output appropriately for the context (HTML, URL, JavaScript).
• 🏛️ Cross-Site Request Forgery (CSRF) Protection: Implement CSRF tokens to prevent unauthorized requests on behalf of the user.
• 🔒 Password Security: Hash passwords using strong hashing algorithms (e.g., Argon2, bcrypt) with salt.

Practice Quiz

1. What is the primary purpose of using HTTPS in web form development?
   1. A. To improve website loading speed.
   2. B. To encrypt data transmitted between the browser and the server.
   3. C. To enhance website aesthetics.
   4. D. To reduce server load.
2. Which type of attack can be prevented by using prepared statements or parameterized queries?
   1. A. Cross-Site Scripting (XSS)
   2. B. Cross-Site Request Forgery (CSRF)
   3. C. SQL Injection
   4. D. Denial of Service (DoS)
3. What does the `HttpOnly` flag do when set on a cookie?
   1. A. Prevents the cookie from being transmitted over HTTP.
   2. B. Prevents the cookie from being accessed by client-side scripts.
   3. C. Encrypts the cookie data.
   4. D. Makes the cookie accessible only to the server.
4. Why is it important to validate user inputs on both the client-side and server-side?
   1. A. Client-side validation improves user experience, while server-side validation ensures data integrity and security.
   2. B. Client-side validation is sufficient for security.
   3. C. Server-side validation only is sufficient for security.
   4. D. To reduce the amount of data sent to the server.
5. What is the purpose of CSRF tokens?
   1. A. To prevent users from accessing the website.
   2. B. To prevent unauthorized requests on behalf of the user.
   3. C. To encrypt user passwords.
   4. D. To validate user inputs.
6. Which of the following is the MOST secure method for storing user passwords?
   1. A. Storing passwords in plain text.
   2. B. Hashing passwords with MD5.
   3. C. Hashing passwords with a strong algorithm (e.g., Argon2, bcrypt) and a salt.
   4. D. Encrypting passwords with AES.
7. What type of vulnerability does sanitizing user inputs primarily prevent?
   1. A. SQL Injection
   2. B. Cross-Site Scripting (XSS)
   3. C. Cross-Site Request Forgery (CSRF)
   4. D. Denial of Service (DoS)