Unit 4: Forms in Django - Practice Quiz

1 What is the main purpose of an HTML form in a Django application?

2 Which HTML element is used to create a form?

3 Which form control is commonly used to submit an HTML form?

4 Where is form data normally placed when the GET method is used?

5 Which HTTP method is commonly used when a form changes data on the server?

6 Which Django request attribute identifies the HTTP method used?

7 Which Django object contains form values submitted using POST?

8 Which Django class is commonly extended to create a standard form?

9 How are fields usually declared in a Django form class?

10 Which Django form field is suitable for a short line of text?

11 What is the main purpose of Django's ModelForm?

12 Which template expression renders a Django form with fields wrapped in paragraph elements?

13 What does CSRF stand for?

14 What is the goal of a CSRF attack?

15 Which template tag adds CSRF protection to a Django POST form?

16 Where should {% csrf_token %} normally be placed?

17 What response is commonly returned when Django rejects a request because of a missing or invalid CSRF token?

18 Why is a redirect commonly performed after successfully processing a POST request?

19 Which Django shortcut is commonly used to send the user to another URL after processing a form?

20 Which method checks whether submitted data in a Django form is valid?

21 A product filter form allows users to choose a category and minimum price without changing server data. Which form method is most appropriate?

22 An HTML form contains <input name="email">, but its submitted value does not appear in the request data. Which issue is the most likely cause?

23 A Django search view receives a request for /search/?q=django&page=2. How should the view retrieve the search term?

24 A view should create a comment only when a form is submitted using POST. Which condition correctly checks the HTTP method?

25 A form submits multiple checkboxes with the same name, skills. Which expression retrieves all selected values?

26 A view must display an empty ContactForm for GET requests and a bound form for POST requests. Which initialization handles both cases correctly?

27 A ModelForm should allow users to edit only a book's title and publication_date. Which Meta configuration is appropriate?

28 A template renders {{ form.as_p }} inside a <form> element, but clicking Submit sends no request. What must still be added?

29 A Django form includes a FileField, but uploaded files are always missing during validation. Which combination is required?

30 A malicious page causes a logged-in user's browser to submit a hidden form to a banking site. Why might the forged request be authenticated?

31 Which application behavior creates the clearest CSRF risk?

32 Why does changing a state-modifying endpoint from GET to POST not, by itself, prevent CSRF?

33 A Django template posts to an internal view and receives 403 CSRF verification failed. The middleware is enabled. What is the usual template fix?

34 JavaScript sends an AJAX POST request to a Django view protected by CSRF middleware. Where is the token commonly supplied?

35 A developer adds @csrf_exempt to a cookie-authenticated profile update view to fix a 403 response. What is the best assessment?

36 After successfully saving a form, a Django view renders the success template directly. Refreshing the page resubmits the form. Which change implements Post/Redirect/Get?

37 A valid ModelForm creates a new article. The success page needs the article's generated primary key. Which approach is appropriate?

38 A form has a field named age, and only that field needs a custom rule requiring users to be at least 18. Which method should the form define?

39 A registration form must reject data when password and confirm_password differ. Where should this cross-field validation normally be implemented?

40 A view accesses form.cleaned_data["email"] immediately after constructing ContactForm(request.POST). What should it do first?

41 A Django view uses GET /orders/42/cancel/ to cancel an order and then returns a confirmation page. Even if authentication and CSRF checks are added, what is the most fundamental design problem?

42 A request URL is /search/?tag=django&tag=python. Which expression reliably retrieves both submitted values from Django's request.GET?

43 A search view creates its form with SearchForm(request.GET or None). What subtle behavior occurs when the page is requested as /search/ with no query parameters?

44 A form is instantiated as ProfileForm(data={'name': ''}, initial={'name': 'Ada'}), and name is required. What happens when is_valid() is called?

45 For a field named age, which sequence best describes Django's normal validation flow when no earlier stage raises an error?

46 A form must reject a date range when end_date < start_date, while keeping the error associated with the combination rather than either field alone. What is the most appropriate implementation?

47 Inside Form.clean(), code executes self.add_error('email', 'Domain is blocked') after email was initially cleaned successfully. What important side effect does Django apply?

48 A ModelForm overrides clean() but does not call super().clean(). Individual fields still validate. Which behavior is especially at risk?

49 A valid ModelForm contains a many-to-many field. The view calls instance = form.save(commit=False), modifies the instance, and then calls instance.save(). What must generally happen next?

50 A form has document = forms.FileField(). The browser submits a valid multipart request, but the view constructs UploadForm(request.POST) and validation reports that the file is missing. What correction is required?

51 Why can an attacker often launch a CSRF attack without learning the victim's session cookie?

52 Django may render a masked CSRF token whose value changes between responses even though the underlying CSRF secret remains valid. What is the primary purpose of this masking?

53 A same-origin JavaScript client sends JSON with fetch() to a CSRF-protected Django POST endpoint. There is no HTML form body. Which approach integrates with Django's standard CSRF middleware?

54 A page performs only JavaScript-based POST requests and renders no {% csrf_token %}. Consequently, some first-time visitors receive no CSRF cookie. Which Django tool directly addresses this?

55 After moving a Django form to https://app.example.com, legitimate POST requests originating from https://forms.example.net fail CSRF origin checks despite carrying a valid token. What configuration is relevant?

56 A successful POST creates a payment record and directly renders success.html. Refreshing the page can resubmit the POST. Which change correctly applies the Post/Redirect/Get pattern?

57 A view redirects after both valid and invalid POST submissions. On invalid input, the redirected page displays an unbound form and loses all field errors. What is the best default design?

58 A purchase view follows PRG, but two nearly simultaneous POST requests with the same payload still create duplicate purchases. What does this demonstrate?

59 A page displays two instances of the same AddressForm, but both forms use identical field names such as city. How should the forms be constructed so each binds only its own submitted fields?

60 A form defines account_id = forms.IntegerField(disabled=True, initial=17). A malicious client submits account_id=999. Assuming the form is otherwise valid, which value appears in cleaned_data['account_id']?