App Security and npm Quiz

Which package is used to hash passwords and other sensitive information before sending them to the database to protect against breaches?

• dotenv

• bcrypt

• jsonwebtoken

• mongoose

Answer explanation

bcrypt is used to hash passwords and other sensitive information before storing them in a database. Hashing is a security measure that converts sensitive data into a fixed-length string of characters, making it difficult for attackers to decipher the original data. This helps protect against breaches by ensuring that even if the database is compromised, the original passwords and sensitive information remain secure.

What is the purpose of the jsonwebtoken package in app security?

• To manage environmental variables and sensitive information.

• To hash passwords and sensitive information.

• To provide a means of representing claims transferred between two parties securely.

• To build APIs and server-side applications with Node.js.

Answer explanation

jsonwebtoken is used to create and verify JSON Web Tokens (JWTs), which are a means of representing claims between two parties securely.

JWTs are commonly used for authentication and information exchange in web development.

The package allows developers to create tokens containing information (claims) that can be verified by the receiving party to ensure their authenticity and integrity.

This helps enhance app security by enabling secure communication and verification of user identity.

What npm command is used to initialize a new or existing npm package in a directory?

• npm install

• npm start

• npm init

• npm run

What is the purpose of authorization in app security?

• To track user activity within the application.

• To determine user permissions within the application.

• To verify user or system identity for application access.

• To encrypt data at rest.

Answer explanation

Authorization in app security controls what users can do in the application. It decides which parts of the app a user can access based on their identity and role. This prevents unauthorized access to sensitive data and features, ensuring that users only have access to what they're supposed to.

What is the purpose of authentication in app security?

• To track user activity within the application.

• To determine user permissions within the application.

• To verify user identity when accessing an application.

• To manage user accounts and system settings.

Answer explanation

Authentication in app security is like proving you are who you say you are. It's the process of verifying your identity, typically by entering a username and password, to access an app. This helps ensure that only the right people can get into the app and keeps out unauthorized users.

Which of the following is NOT a responsibility of administration in app security?

• User account creation, modification, and deletion.

• Role assignment (e.g., user, admin).

• Configuring security policies.

• Tracking user activity within the application.

What is the purpose of using dotenv in app security?

• To manage environmental variables and sensitive information.

• To hash passwords and sensitive information.

• To handle authentication and authorization.

• To encrypt sensitive data at rest.

Answer explanation

dotenv helps keep sensitive information, like passwords or API keys, safe by storing them in a separate file. It loads these details into the app securely, so they're not exposed in the code.

What is the role of mongoose in app security?

• To load environmental variables from an env file into Node’s process.env object.

• To hash passwords and sensitive information.

• To provide a means of representing claims transferred between two parties.

• To enforce data validation and schema enforcement.

Answer explanation

Mongoose is an Object Data Modeling (ODM) tool for MongoDB in Node.js that helps ensure that data in a MongoDB database is stored correctly. It does this by defining rules for how data should look (like a blueprint) and checking that new data meets those rules before saving it. This helps prevent mistakes and keeps data safe and organized.

What is the significance of managing user accounts in app security?

• To encrypt sensitive data in transit.

• To provide a personalized user experience.

• To ensure compliance with data protection regulations.

• To prevent unauthorized access and protect user data.

Answer explanation

Managing user accounts is significant in app security for several reasons. One of the primary purposes is to prevent unauthorized access to sensitive information and functionalities within an application. By managing user accounts, applications can enforce authentication mechanisms, such as username/password combinations or multifactor authentication, to verify the identity of users before granting access.

What is the purpose of auditing in app security?

• To verify the identity of a user or system attempting to access an application.

• To determine what actions a user is allowed to perform within the application.

• To track user activity within the application.

• To manage user accounts, permissions, and system settings.

Answer explanation

Auditing involves tracking and recording user activity within the application for analysis, compliance, and security purposes.