15 Security Rules questions from the Firebase bank, written for Indian campus drives and tech interviews. Every question has a verified answer and an AI-tutor explanation on placd.
Free to start: the 2-minute IT readiness check — six questions and a result.
A.a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
B.the distinction between the document as stored now and the document as it would be after the pending write
C.the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
D.the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims
Answer + AI explanation with Pro
2. Which term means: "the baseline stance where every read and write is rejected until a rule explicitly grants access to a path"?
Junior
A.Data validation rule
B.resource versus request.resource
C.Default deny
D.request.auth
Answer + AI explanation with Pro
3. Which statement is correct?
Junior
A.Default deny — a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
B.Default deny — a rule function that reads another document to make an access decision, billed as an extra operation per evaluation
C.Default deny — the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
D.Default deny — the distinction between the document as stored now and the document as it would be after the pending write
Answer + AI explanation with Pro
4. What is request.auth?
Mid
A.the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims
B.the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
C.a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
D.the distinction between the document as stored now and the document as it would be after the pending write
Answer + AI explanation with Pro
5. Which term means: "the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims"?
Mid
A.request.auth
B.get() lookup
C.resource versus request.resource
D.Default deny
Answer + AI explanation with Pro
6. Which statement is correct?
Mid
A.request.auth — the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
B.request.auth — the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims
C.request.auth — a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
D.request.auth — a rule function that reads another document to make an access decision, billed as an extra operation per evaluation
Answer + AI explanation with Pro
7. What is Data validation rule?
Mid
A.a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
B.the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
C.a rule function that reads another document to make an access decision, billed as an extra operation per evaluation
D.the distinction between the document as stored now and the document as it would be after the pending write
Answer + AI explanation with Pro
8. Which term means: "a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge"?
Mid
A.request.auth
B.get() lookup
C.resource versus request.resource
D.Data validation rule
Answer + AI explanation with Pro
9. Which statement is correct?
Mid
A.Data validation rule — a rule function that reads another document to make an access decision, billed as an extra operation per evaluation
B.Data validation rule — a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
C.Data validation rule — the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims
D.Data validation rule — the distinction between the document as stored now and the document as it would be after the pending write
Answer + AI explanation with Pro
10. What is resource versus request.resource?
Senior
A.the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims
B.the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
C.a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
D.the distinction between the document as stored now and the document as it would be after the pending write
Answer + AI explanation with Pro
11. Which term means: "the distinction between the document as stored now and the document as it would be after the pending write"?
Senior
A.get() lookup
B.resource versus request.resource
C.request.auth
D.Default deny
Answer + AI explanation with Pro
12. Which statement is correct?
Senior
A.resource versus request.resource — the distinction between the document as stored now and the document as it would be after the pending write
B.resource versus request.resource — the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims
C.resource versus request.resource — the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
D.resource versus request.resource — a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
Answer + AI explanation with Pro
13. What is get() lookup?
Senior
A.the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims
B.a rule function that reads another document to make an access decision, billed as an extra operation per evaluation
C.the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
D.a condition checking the shape, type, or size of incoming fields so the database rejects malformed writes at the edge
Answer + AI explanation with Pro
14. Which term means: "a rule function that reads another document to make an access decision, billed as an extra operation per evaluation"?
Senior
A.request.auth
B.get() lookup
C.Default deny
D.resource versus request.resource
Answer + AI explanation with Pro
15. Which statement is correct?
Senior
A.get() lookup — the baseline stance where every read and write is rejected until a rule explicitly grants access to a path
B.get() lookup — the rule variable that is null for unauthenticated callers and otherwise carries the signed-in user's uid and token claims
C.get() lookup — the distinction between the document as stored now and the document as it would be after the pending write
D.get() lookup — a rule function that reads another document to make an access decision, billed as an extra operation per evaluation
Answer + AI explanation with Pro
Free to start
Start with a free readiness check
Sign up free for the 2-minute IT readiness check and a scored result. Answers, explanations and the AI tutor on every Security Rules question come with Pro.