Skip to content
Sharp

OWASP Vulnerabilities interview questions

Cross-Site Request Forgery (CSRF), Cross-Site Scripting (XSS), SQL Injection

64 questions with answers and explanations · 64 flashcards

Take a free OWASP Vulnerabilities testAll Java Interview Prep topics

Questions (page 2 of 2)

  1. How would you explain a potential risk of not using CSRF tokens in web applications in an interview?Multiple choiceMedium
  2. What does 'stateless' imply in the context of JWT?Multiple choiceEasy
  3. How would you explain a critical step in preventing stored XSS attacks in a Java-based web application in an interview?Multiple choiceHard
  4. Which aspect of the Spring Security Filter Chain is crucial for protecting against CSRF attacks?Multiple choiceHard
  5. What does the 'OR 1=1;--' SQL Injection payload typically achieve?Multiple choiceMedium
  6. Which part of a JWT ensures data integrity and authenticity?Multiple choiceMedium
  7. In a stateless JWT token, what does the Signature part ensure?Multiple choiceMedium
  8. Why is HTML encoding crucial in preventing stored XSS attacks?Multiple choiceHard
  9. Why do teams use parameterized queries in production code?Multiple choiceMedium
  10. Why does a JWT's 'alg' field matter in this design?Multiple choiceEasy
  11. How does the BCrypt Work Factor influence password hashing?Multiple choiceMedium
  12. Which Java class is commonly used to prevent SQL Injection by safely handling SQL queries?Multiple choiceMedium
  13. Why is it useful to salting passwords before hashing them?Multiple choiceMedium
  14. In Java, what is a potential downside of using BCrypt with a very high work factor?Multiple choiceHard