NestJS · Senior · Question 41 of 75

Which settings make a Nest API safer by default?

✓Correct answer: Global ValidationPipe with whitelist and forbidNonWhitelisted, Helmet, strict CORS, rate limiting, body size limits and a deny-by-default auth guard
2Disabling validation for speed
3Allowing all origins with credentials

Explanation

Deny-by-default means every route requires auth unless explicitly marked public.

Further reading

Test yourself

Take the NestJS · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.