CyberCertPrepWeb App FundamentalsBrowser SecurityEASYFree question
What does the browser 'developer tools' Network tab reveal, and what security implication does this have for front-end developers?
- A.Network tab only shows JavaScript errors, not HTTP traffic
- B.The Network tab is only visible to administrators with DevTools access
- C.The Network tab shows all HTTP requests and responses including headers, body content, authentication tokens, cookies, and response data - everything the browser sends or receives is visible. Any sensitive data in API responses (hidden JSON fields, tokens, internal IDs) is visible to the logged-in user via DevTools
- D.Network traffic is encrypted in DevTools and cannot be read
Why C is correct
DevTools is the first tool a security-conscious developer should open when reviewing their own application. Everything is visible: JWTs in Authorization headers, API responses with sensitive fields, cookie values (unless HttpOnly for the cookie tab), WebSocket messages, and request parameters. This reinforces why server-side data minimization matters - never return sensitive data in API responses just because the UI won't display it.
Know someone studying for Web App Fundamentals? Send them this one.