Web Architecture and Configuration GWEB Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is designing a web application that will handle sensitive financial data. They want to ensure that the application can scale horizontally and that the database is not a single point of failure. Which architecture is most appropriate?

   • ADeploy multiple database servers but keep the application on a single server.
   • BUse a monolithic application on a single server with a local database.
   • CRun the application and database on a single powerful server to reduce complexity.
   • DDeploy multiple application server instances behind a load balancer and use a managed database service with replication and automatic failover.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In web application security, what does a 'trust boundary' represent?

   • AThe point where data moves from a less trusted zone to a more trusted zone
   • BThe point where a user logs in
   • CThe physical firewall device only
   • DThe boundary between HTML and CSS
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   A web application uses an ORM (Object-Relational Mapping) framework to interact with a database. The ORM is configured to use lazy loading for related entities. A developer notices that the application is making many database queries in a loop, causing performance issues. Which ORM feature is most likely to help reduce the number of queries?

   • AEager loading
   • BQuery caching
   • CConnection pooling
   • DLazy loading
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security review of a web application reveals that a critical business function is implemented entirely in client-side JavaScript. The application relies on a JavaScript function to calculate the total price of a purchase and then submits that value to the server. Which security concern is most directly associated with this design?

   • AThe application will not work in browsers that have JavaScript disabled
   • BThe JavaScript code will be executed on the server, causing a denial of service
   • CThe server cannot trust the price value because it can be modified by the client
   • DThe JavaScript code will be visible to users, exposing the business logic
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A web application allows users to download files. The server receives a request for a file and responds with a 302 Found status code. What is the most likely reason for this response?

   • AThe server is redirecting the client to a different URL, such as a login page or a signed download URL.
   • BThe requested file was not found on the server.
   • CThe server is indicating that the file has been permanently moved.
   • DThe server is asking the client to authenticate using HTTP Basic authentication.
   Reveal Solution Discussion Select an answer first