Spring Boot Security Quiz - MCQ - Multiple Choice Questions

Q. What does Spring Security provide?

A Authentication and Authorization support. B Logging support. C Database connectivity. D UI templates.

Q. Which authentication mechanism does Spring Security support?

A OAuth2. B JWT. C Basic Authentication. D All of the above.

Q. Which of the following is not a core concept of Spring Security?

A Authentication. B Authorization. C Dependency Injection. D Password Encryption.

Q. Which annotation in Spring Security is used to secure a method or class?

A @Secure B @Protect C @Secured D @Guarded

Q. Which interface in Spring Security is used to encode passwords?

A PasswordEncoder. B SecurityEncoder. C CredentialEncoder. D Encryptor.

Q. Which authentication provider in Spring Security supports LDAP authentication?

A DaoAuthenticationProvider. B LdapAuthenticationProvider. C InMemoryAuthenticationProvider. D JdbcUserDetailsManager.

Q. How can you configure method-level security in Spring Security?

A Using configuration classes. B Using @Secured annotation. C Using XML configuration. D All of the above.

Q. What is CSRF protection in Spring Security?

A Cross-Site Request Forgery protection. B Cross-Site Scripting protection. C Cross-Origin Resource Sharing protection. D Cross-Site Replay protection.

Q. What is the purpose of the Remember-Me functionality in Spring Security?

A To remember user credentials between sessions. B To remember user preferences. C To remember user sessions only on the server. D To remember secured resources.

Q. Which authentication provider in Spring Security is suitable for custom authentication logic?

A DaoAuthenticationProvider. B InMemoryAuthenticationProvider. C AbstractUserDetailsAuthenticationProvider. D LdapAuthenticationProvider.

Q. Which of the following code snippets demonstrates the correct configuration of Spring Security in a Spring Boot application?

A Configuration with `@EnableWebSecurity` and role-protected `/admin`.

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
            .antMatchers("/admin").hasRole("ADMIN")
            .anyRequest().authenticated()
            .and()
            .formLogin();
    }
}

B Configuration with `@Configuration` and `@EnableWebSecurity`.

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
            .antMatchers("/admin").hasRole("ADMIN")
            .anyRequest().authenticated()
            .and()
            .formLogin();
    }
}

C Configuration missing `@EnableWebSecurity`.

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
            .antMatchers("/admin").hasRole("ADMIN")
            .anyRequest().authenticated()
            .and()
            .formLogin();
    }
}

D Configuration that permits everyone on `/admin`.

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
            .antMatchers("/admin").permitAll()
            .anyRequest().authenticated()
            .and()
            .formLogin();
    }
}

Q. Which annotation is used to enable method-level security in a Spring Boot application using Spring Security?

A @PreAuthorize B @Secured C @RoleAllowed D @Authorize

Q. Which of the following code snippets demonstrates the correct usage of @Secured annotation in a method for role-based security?

A Uses `@Secured("ROLE_ADMIN")` without the array wrapper.

@Secured("ROLE_ADMIN")
public void adminOperation() {
    // Admin operation logic
}

B Uses `@Secured({"ADMIN"})` without the ROLE_ prefix.

@Secured({"ADMIN"})
public void adminOperation() {
    // Admin operation logic
}

C Uses `@Secured({"ROLE_ADMIN"})` with the proper ROLE_ prefix.

@Secured({"ROLE_ADMIN"})
public void adminOperation() {
    // Admin operation logic
}

D Uses `@Secured("ADMIN")` without ROLE_.

@Secured("ADMIN")
public void adminOperation() {
    // Admin operation logic
}

Q. Which of the following statements is true about CSRF protection in Spring Security?

A CSRF protection is automatically enabled and applies globally. B CSRF protection is disabled by default. C CSRF requires an `@EnableCsrf` annotation. D CSRF targets only specific endpoints you list.

Q. Which annotation is used to secure methods with both authentication and authorization in Spring Security?

A @PreAuthorize B @Secured C @RolesAllowed D @Authenticate

Q. Which class needs to be extended to configure custom authentication logic in Spring Security?

A WebMvcConfigurer B WebSecurityConfigurerAdapter C AuthenticationProvider D UserDetailsService

Q. How can you enable method security in a Spring Boot application using @EnableGlobalMethodSecurity annotation?

A Add it to a dedicated SecurityConfig class. B Add it to WebMvcConfigurer implementations. C Add it directly to WebSecurityConfigurerAdapter subclasses. D No action is neededâmethod security is automatic.

Q. Which authentication provider is commonly used with Spring Security for user authentication?

A JDBC Authentication Provider. B InMemory Authentication Provider. C LDAP Authentication Provider. D OAuth2 Authentication Provider.

Q. How can you configure URL-based security in Spring Security to allow access to specific endpoints?

A Use `antMatchers()` in the `HttpSecurity` DSL. B Add `@Secured` to controller methods. C Override `WebSecurityConfigurerAdapter` without ant matchers. D Enable method security with `@EnableGlobalMethodSecurity`.

Q. Which annotation is used to secure a method with expression-based access control in Spring Security?

A @Secured B @PreAuthorize C @RolesAllowed D @Authorize

Search Tutorials

Spring Boot Security Quiz - MCQ - Multiple Choice Questions

Popular Posts

See Also