Quiz Space

Tools in Data Science · End Term · 13 Sept 2026 · May 2026 term

Question 19: A proposed GitHub Pages application must keep a private …

Question 19

+1 markOne correct option

A proposed GitHub Pages application must keep a private API key, execute server-side payment logic, and write directly to a database. What is the fundamental problem?

  1. A

    Static hosting lacks a protected server runtime for private secrets, payment logic, and database writes.

  2. B

    Static hosting cannot call external payment APIs or database services from client-side JavaScript at all.

  3. C

    Browser code can protect permanent private keys when source maps and developer tools are disabled.

  4. D

    Frontend environment variables remain private when injected only during the static site's build process.

Show answer

Correct answer

  • A

    Static hosting lacks a protected server runtime for private secrets, payment logic, and database writes.

See the whole paperTake it as a mock test

Question 19 of 39 in the IIT Madras BS Tools in Data Science (Tools in Data Science (TDS)) End Term paper sat on 13 Sept 2026, in the May 2026 term (Tools In Data Science 13 Sep 26). It carries 1 mark.

More questions from this paper

  1. Q1After a release, average API latency changes from 220 ms to 230 ms. The median changes from 120 ms to 125 ms, but check…
  2. Q2An API's health endpoint returns 200 because the process can accept HTTP requests. All purchase requests fail because t…
  3. Q3Yesterday an API recorded 100 failed requests out of 1,000 requests. Today it recorded 200 failed requests out of 10,00…
  4. Q4A nightly scraper normally covers 100 pages. Tonight it fails after page 60. The pipeline marks every previously known …
  5. Q5A vendor confirms that raw dataset version 1 contains an error and supplies corrected records. Which storage approach b…
  6. Q6A public repository receives a pull request from a fork. The test workflow does not need deployment credentials. A sepa…
  7. Q7Tests pass, but the reviewed infrastructure plan says the production database will be destroyed and recreated because a…
  8. Q8A valid production API key was committed to a repository. A later commit removes the visible line. What is the most imp…
  9. Q9A release candidate has passed tests and staging checks, but production traffic patterns are much larger and more varie…
  10. Q10An AI produces a fluent report containing several factual claims and a confident recommendation. The report will influe…
  11. Q11A downstream system expects one category from an allowed list and a numeric confidence score. An AI sometimes adds pros…
  12. Q12A support assistant answers questions from policy documents that are revised regularly. Answers must reflect the curren…
  13. Q13A support agent can read an order and issue a refund. Refunds above ₹5,000 require recorded human approval. Which contr…
  14. Q14A service may scale to zero, restart, or replace an instance. It must preserve job status across those events. Which de…
  15. Q15Figure question
  16. Q16A browser frontend moves to a new origin. Its API request is blocked, while the same request succeeds from a command-li…
  17. Q17An application must sign a user in and learn the user's identity. With separate consent, it may read that user's calend…
  18. Q18A faulty commit is already on a shared main branch and other developers have pulled it. The team wants an auditable und…
  19. Q20A developer binds a laptop service to 0.0.0.0, but it remains inaccessible from the public internet. Which explanation …
  20. Q21A system writes independent event records continuously. Operators want to append records and process them one at a time…
  21. Q22One public server must expose api.example.com and docs.example.com over HTTPS while keeping both backend services on pr…
  22. Q23An order request passes through an API, inventory service, payment service, and database. About 2% of requests fail, bu…
  23. Q24An LLM feature's daily cost rises tenfold while request volume is unchanged. A cloud budget alert arrives several hours…
  24. Q25A product scraper runs hourly. Each product has a stable SKU. Title and price are meaningful business fields, while vie…
  25. Q26A payment request times out. The service supports a stable idempotency key and a status lookup by that key, but the cli…
  26. Q27Which controls materially reduce CI/CD and container supply-chain risk?
  27. Q28A frontend and backend run in separate containers on the same application network. The backend also writes durable cust…
  28. Q29Which statements describe distinct API security responsibilities correctly?
  29. Q30Six months after deployment, an auditor asks the team to reproduce a model training run. Which records are most necessa…
  30. Q31You are designing a prompt for an AI that will triage data-quality tickets.\ After the exam, your prompt will be tested…
  31. Q32NOTE: Your answer should not exceed 60 words.
  32. Q33Write the five questions you would ask the project owner before the team commits to building this system, each with wha…
  33. Q34An AI will repeatedly be asked to analyse small pilot experiments like the one below.\ Your job is not to answer the bu…
  34. Q35Figure question
  35. Q36Choose exactly three of the AI's claims to investigate before release and, for each, give the first manual check and wh…
  36. Q37Make exactly one contiguous edit (at most 25 words replaced, at most 25 words in) to the AI's campaign recommendation t…
  37. Q38Select every statement a second AI makes that is valid under the business brief and data.\ A second AI model reviews th…
  38. Q39Select exactly four deductions that are valid under the stated policy and trace. A retail support agent can call these …