DEBUG must be False in production, and ALLOWED_HOSTS should contain only the specific domain names or IP addresses that serve the application
Settings.py Configuration: Understanding DEBUG and ALLOWED_HOSTS in production
DEBUG can remain True in production as long as ALLOWED_HOSTS is set to ['*']
ALLOWED_HOSTS is only needed during development and can be left empty in production
Setting DEBUG to False automatically secures all Host header vulnerabilities regardless of ALLOWED_HOSTS
Show answer & explanationAnswer
Correct answer
DEBUG must be False in production, and ALLOWED_HOSTS should contain only the specific domain names or IP addresses that serve the application
Explanation
DEBUG should be False in production to avoid exposing sensitive information. ALLOWED_HOSTS must explicitly list all domain names/IPs that can serve the application, preventing Host header attacks.
Written by ExamHoot EditorialPublished · Updated
All 30 Django Project Structure and Setup questions
- 1.What is the primary purpose of the manage.py file in a Django project?
- 2.Which file in a Django project is used to store project-level settings and configurations?
- 3.What does the __init__.py file do in a Django app directory?
- 4.Which command is used to create a new Django app within a project?
- 5.What is the purpose of the models.py file in a Django app?
- 6.Where should static files like CSS and JavaScript be placed in a Django project?
- 7.What is the role of the urls.py file in a Django project?
- 8.Which file is responsible for WSGI application setup in a Django project?
- 9.What command should you run after creating a new Django app to register it in the project?
- 10.Where are HTML templates typically stored in a Django app?
- 11.Scenario:
- 12.What is the correct sequence of steps to initialize a Django project?
- 13.Hari is configuring a Django project with multiple databases.
- 14.Code-based:
- 15.What is the purpose of the apps.py file in a Django app?
- 16.Scenario:
- 17.Code-based:
- 18.What is the purpose of the admin.py file in a Django app?
- 19.Hari is creating a Django project with custom middleware.
- 20.Code-based:
- 21.Django Project Structure:
- 22.Django Project Directory Layout:
- 23.Django Apps and Project Configuration:
- 24.Settings.py Configuration:
- 25.Django Database Configuration:
- 26.Middleware Configuration:
- 27.Static and Media Files:
- 28.Environment Variables and Secret Management:
- 29.URL Configuration and URL Routing:
- 30.INSTALLED_APPS Configuration:
