SE3316 Final Flashcards
T/F: server side scripting files contain both direct html code and code blocks
true
Which server-side-scripting language is most widespread?
PHP
Which server-side-scripting language is used in large enterprise applications?
JSP
Which server-side-scripting language is the new hotness?
Node.js…
ASP.Net can use which .Net language?
Any .Net language
How many Apache helicopters does an Apache server need to serve in order for the ancestral land claims of the Apache tribe to be fulfilled?
3 + 820 milliseconds
Django runs on Which server-side-scripting language?
Python
Which server-side-scripting language is an MVC web application framework?
Ruby on Rails
What is a LAMP stack?
Linux, Apache, MySQL, PHP
What is the difference between LAPP stack and LAMP stack?
Lapp uses PostgreSQL instead of MySQL
What is the Ruby stack?
Ruby, ruby-on-rails, Apache, MySQL
What is the Django stack?
Python, Django, Apache, MySQL
Which server-side-scripting language used VBScript?
ASP
What are the responsibilities of a scripting engine?
- run script code
- manage database connections
- manage cookies and state
- upload and manage files
Which of the following was not mentioned in this course?
SAX, DOM, MEAN, LAPP, LAMP, DMCA, MSXML, COM, MVC, WIPO, WAI, VB, ASP, XML, JAXB, XMLS, DTD, XAct, EFF, SSL, WCT, PGP, IPSec, FOSI, openSSL, DOS, YMYD, PHP, JSP, SOC, URI, HTML, OSP, ISP, CSS, XDuce, JSON, XSLT, W3C, XHTML, XSL-FO, JDOM, API, STX
YMYD (Your Mum’s Your Dad)
What are HTTP/2’s features?
Binary Protocol, One TCP connection multiple streams, Header compression,
Server push
Security Services can provide?
Confidentiality, Integrity, Authenticity, non-repudiation (sender/receiver cannot deny sending/receiving)
& Protection from DOS attacks
SSL/TLS can provide
Confidentiality, Integrity, and Authenticity
What cryptography does SSL and TLS use
public-key cryptography (public + private keys)
Can rogue Egyptians frig with certificates issuance?
Y E S
What is URI?
Unifrom Resource Identifier
What are some Software Stacks for Web apps
LAMP (Linux, Apache, MySQL, PHP), MEAN (MongoDB, Expres, Angular, Node),
Ruby, Django
Define AJAX
Asynchronous JavaScript and XML
What an HTML validator return?
Syntax errors
what is the format for a code point?
U+XXXX (4 digit hex)
Is a code unit fixed or variable length?
fixed
In UTF-8, how many code units make up one code point?
1-4
In UTF-8, how many bytes is 1 code unit?
1
Is javascript a class based or prototype based language?
prototype based
What is the definition of a prototype based language?
– All objects can inherit from another object
– Construct object hierarchy by assigning an object as the prototype
What are the advantages of client-side scripting?
–Does not have to refresh the page with every request
–More interactive, responds to user faster
–Can give developers more control over look and feel
What are the disadvantages of client-side scripting?
–Not all browsers will support
– different browsers will interpret differently
– more development time may be required
Advantages of server–side scripting?
–Can create one template for the entire site
– Can use content management system, makes editing simpler
– Scripts are hidden from view, so is more secure
– No need to download plugins
Disadvantages of server–side scripting
–scripts and content management may require databases to store dynamic data
– will take longer to fulfill user requests
– user experience is less interactive/immersive
What is AJAX?
Asynchronous Javascript and XML – allows JavaScript to communicate with server without reloading page
Is Jquery a library or a framework?
library
How can info be displayed to someone without JavaScript?
using the noscript tag
In JS, a variable declared inside a block is accessible where?
Only inside the block
What is variable hoisting?
The act of moving a declared variable to the top of its block
Will a variable initialization be hoisted?
No, only the declaration
What happens if a variable created with the let keyword is accessed before declaration?
Throws an error
What happens if a variable declared with the var keyword is accessed before declaration?
The variable will return undefined, will not throw an error
Will this function declaration
function x(int y){…}
be hoisted?
yes
Will this initialization be hoisted?
var answer = x(int y){…}
be hoisted?
No – variable assignment is not hoisted (but the declaration will be)
What are the types of Nodes in the DOM?
Text, element, attribute
What are nodes who have the same parent node called?
siblings
How are events captued in JS?
With an event listener
Is HTTP a stateless protocol?
yes
What is a private address space?
Not visible outside of LAN
Is GET a safe method?
yes
Is POST idempotent?
no
Is TRACE a safe method?
yes
Is GET idempotent?
yes
What does TLS stand for?
Transport Layer Security
What security services do SSL and TLS offer?
Confidentiality, Integrity, Authentication
Name server side scripting languages
PHP (Personal Home Page), ASP (Active Server
Page), CFM (ColdFusion Mark up Language), JSP (Java Server Pages) Pearl, Python, Ruby on Rails
Server-side JavaScript (using Node.js)
What are some Software Stacks for Web apps
LAMP (Linux, Apache, MySQL, PHP), MEAN (MongoDB, Expres, Angular, Node),
Ruby, Django
What is required in an HTTP request?
Request line, header lines, body
What is required in an HTTP response message?
Status line, header lines, body
What does a 200-level HTTP response mean?
success
What does a 500-level response mean?
Server-side error
What is a cookie?
A file stored on a domains server containing data about the client
What are the limitations of HTTP?
- Stateless: No session management
- No built in security
What are the improvements of HTTP/2 over HTTP/1?
Binary Protocol
One TCP connection, multiple streams
Header compression
Server push
Are all Safe HTTP Methods also idempotent?
yes
Is HTTP digest good?
No… It uses MD5 hashing, which has been broken!
What is a 4xx Error?
Client Error
what is a 3xx error
Redirection
What are the cons of JavaScript Libraries?
Adds another dependency
Maintenance & Quality Issues
What do Frameworks do that Libraries don’t?
Provide a programming model as well as libraries
Give an example of a user without JavaScript
Web Crawler
Browser plug-n that interferes
Text-Based Client
Visually Disabled Client
How does TLS provide security
Through symmetry encryption, shared secret, Message Authentication Checking MAC and certificates
What are the 2 types of scope in JavaScript
Function scope (block scope), global scope
Define AJAX
Asynchronous JavaScript and XML
What are the responses/states of a promise in JavaScript?
Fulfilled or Rejected, Pending or Settled
What are the responsibilities of web servers?
- listen to incoming HTTP connections, respond to requests
- manage access to resources
- encrypt/decrypt and compress/decompress data
- manage multiple domains and URLs
- invoke scripting engines, send and receive data
What are the responsibilities of a scripting engine?
- run script code
- manage database connections
- manage cookies and state
- upload and manage files
What are the pros and cons of web scripting?
Pro:
-allows integrating large databses and sophisticated processing
Cons:
-requires entire software suite to be written in the scripting language
-interfacing w/ existing enterprise software can be difficult
How is interactivity typically achieved in web applications?
By sending “form data” through HTTP put or post methods
T/F: Web content for machines deals with presentation
No it does not
Form based web apps can have sluggish interfaces due to network latencies - what is the solution?
client-side scripting
What is required for a web service implementation?
Any web server + server-side scripting language
JSP with Tomcat server setup is designed for Web Service Standards (WS-*)
No - it is designed for Java
Apache Axis2 with Java/C interfaces is designed for WS-*