Multiple Choice Questions
Question 1
Which of the following is the most common reason developers choose to integrate third-party libraries into their projects?
- A. To improve security by using well-maintained and trusted libraries
- B. To reduce development time by using pre-built functionalities in libraries
- C. To boost performance by using libraries designed for efficient processing
- D. To ensure compatibility across different platforms and environments
Question 2
After integrating third-party libraries, what is the most effective ongoing practice for minimizing security risks?
- A. Avoiding libraries from unverified or unreliable sources
- B. Restricting library usage to older, more stable versions
- C. Running security scans on third-party libraries before integrating them
- D. Regularly checking for updates and promptly applying security patches
Question 3
What is the most critical risk associated with using outdated or abandoned third-party libraries?
- A. They may slow down a system by using too many resources
- B. They might no longer be available for download or installation
- C. They could have security flaws that attackers can exploit
- D. They often require manual updates to work with new software versions
Question 4
A developer wants to use a third-party library they found. Before adding it to their project, they want to ensure it's secure. What is the most effective way to check for security vulnerabilities?
- A. Reviewing community discussions for reports of security vulnerabilities
- B. Checking official security advisories or vulnerability reports for the library
- C. Confirming that the library is widely used by other developers
- D. Checking the library's update history to see if it receives security patches
Question 5
Third-party libraries help add functionality and save time, but if they are not monitored, they can become security risks. Based on the Polyfill.io example, why is it important to regularly review third-party libraries for potential threats?
- A. Third-party libraries can be compromised over time, so regular reviews help detect and stop security threats before they spread
- B. Regular reviews help confirm that third-party libraries are still actively maintained, ensuring they receive security updates when needed
- C. Reviewing third-party libraries allows developers to replace outdated ones with newer alternatives, eliminating potential security risks
- D. Regularly reviewing libraries helps ensure compatibility with modern browsers and frameworks, reducing functionality issues