BTechibtechi.in
Loading Loading
Free IIT Madras BS notes, PYQs and mock tests at btechi.in

MAD II · Web security, auth & CORS

12 questions · 34 marks · 4 papers

Answer key

Indian Institute of Technology Madras

BS Degree Programme · Examination & Study Paper

Modern Application Development II

Web security, auth & CORS

Official Paper

Examination Instructions & Guidelines

Solve on notebook/paper first before checking solutions.
MCQ: Exactly 1 option is correct. Negative marking applies.
MSQ: One or more options correct. Select all to score.
Scientific calculator allowed for all calculations.
Official answer key is sealed at the end of this sheet.

End Term · 31 Aug 2025 (FN)End Term

Q1MCQ2 Marks·Choose one option
Asked 2 times Key ↓
What is the primary purpose of CORS (Cross-Origin Resource Sharing)?
1. ATo encrypt data between client and server
2. BTo control which domains can access resources
3. CTo compress HTTP responses
4. DTo authenticate users across applications
Q2MSQ2 Marks·Choose all correct options
Asked 2 times Key ↓
Which of the following practices help protect against supply chain attacks?
1. AVersion pinning
2. BStoring keys only in environment variables
3. CReduce Dependencies
4. DUsing only packages with over 1000 stars on GitHub
Read the passage below, then answer Q3–Q4
Answer the given subquestions.
Q3MCQ3 Marks·Choose one option
Key ↓
1. AThe password will be stored as plain text "mypassword123" in the database because WTF_CSRF_ENABLED = False
2. BThe password will be hashed using bcrypt with the salt "this-is-a-salt-key" before being stored in the database
3. CThe password will be hashed using SHA-256 algorithm since no specific hashing method is configured
4. DThe password will be encrypted using the SECRET_KEY and stored in the session only
Q4MCQ4.5 Marks·Choose one option
Key ↓
1. A200, 200, 200
2. B200, 401, 403
3. C200, 401, 401
4. D401, 401, 403

End Term · 31 Aug 2025 (AN)End Term

Q5MCQ2 Marks·Choose one option
Asked 2 times Key ↓
What is the primary purpose of CORS (Cross-Origin Resource Sharing)?
1. ATo encrypt data between client and server
2. BTo compress HTTP responses
3. CTo authenticate users across applications
4. DTo control which domains can access resources
Q6MSQ2 Marks·Choose all correct options
Asked 2 times Key ↓
Which of the following practices help protect against supply chain attacks?
1. AStoring keys only in environment variables
2. BVersion pinning
3. CUsing only packages with over 1000 stars on GitHub
4. DReduce Dependencies
Q7MCQ4.5 Marks·Choose one option
Key ↓
1. ARequest succeeds
2. BCORS error occurs
3. C404 error
4. DThe server crashes

End Term · 22 Dec 2024 (FN)End Term

Q8MCQ3 Marks·Choose one option
Asked 2 times Key ↓
1. Asecure=True and samesite='Strict'
2. Bsecure=False and samesite='Strict'
3. Csecure=True and samesite='None'
4. Dsecure=False and samesite='Lax'
Q9MCQ3 Marks·Choose one option
Key ↓
1. ANo authentication check
2. BSQL injection vulnerability
3. CUnvalidated user input
4. DAll of these
Q10MCQ2 Marks·Choose one option
Asked 2 times Key ↓
1. A
2. B
3. C
4. D

End Term · 22 Dec 2024 (AN)End Term

Q11MCQ3 Marks·Choose one option
Asked 2 times Key ↓
1. Asecure=False and samesite='Strict'
2. Bsecure=True and samesite='None'
3. Csecure=True and samesite='Strict'
4. Dsecure=False and samesite='Lax'
Q12MCQ3 Marks·Choose one option
Asked 2 times Key ↓
1. A
2. B
3. C
4. D

Official Key

Master Answer Key & Explanations

Official answer keys from IIT Madras BS past papers. Click any question to review.

Reveal Key

Q1B

Q2A, C

Q3A

Q4B

Q5D

Q6B, D

Q7B

Q8A

Q9D

Q10B

Q11C

Q12D

Questions and answer keys are reproduced from the official IIT Madras BS papers. Topics and repeated question types are BTechi’s own grouping. BTechi is not affiliated with IIT Madras.