[Apr-2024] Latest 312-96 Exam Dumps for Pass Guaranteed
Reliable Application Security 312-96 Dumps PDF Apr 25, 2024 Recently Updated Questions
NEW QUESTION # 11
Oliver is a web server admin and wants to configure the Tomcat server in such a way that it should not serve index pages in the absence of welcome files. Which of the following settings in CATALINA_HOME/conf/ in web.xml will solve his problem?
- A. < servlet > < servlet-name > default < servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name> < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > true < /param-value > < /init-param > < load-on-startup > l < /load-on-startup > < /servlet >
- B. < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name > < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > disable < /param-value> < /init-param > < load-on-startup > 1 < /load-on-startup> < /servlet >
- C. < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name > < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > false < /param-value > < /init-param > < load-on-startup > 1 < /load-on-startup > < servlet >
- D. < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name>< param-value> 0 < /param value>< /init-param > < init-param > < param-name> listings < /param-name > < param-value > enable < /param-value > < /init-param > < load-on-startup> 1 < /load-on-startup > < /servlet >
Answer: B
NEW QUESTION # 12
Oliver, a Server Administrator (Tomcat), has set configuration in web.xml file as shown in the following screenshot. What is he trying to achieve?
- A. He wants to transfer only request parameter data over encrypted channel
- B. He wants to transfer only response parameter data over encrypted channel
- C. He wants to transfer only Session cookies over encrypted channel
- D. He wants to transfer the entire data over encrypted channel
Answer: D
NEW QUESTION # 13
A developer has written the following line of code to handle and maintain session in the application. What did he do in the below scenario?
- A. Maintained session by creating a Cookie user with value stored in uname variable.
- B. Maintained session by creating a hidden variable user with value stored in uname variable.
- C. Maintained session by creating a HTTP variable user with value stored in uname variable.
- D. Maintained session by creating a Session variable user with value stored in uname variable.
Answer: D
NEW QUESTION # 14
Which of the following state management method works only for a sequence of dynamically generated forms?
- A. Hidden Field
- B. Cookies
- C. URL-rewriting
- D. Sessions
Answer: A
NEW QUESTION # 15
Identify the type of attack depicted in the figure below:
- A. Session fixation attack
- B. Directory traversal attack
- C. SQL injection attack
- D. Parameter/form attack
Answer: A
NEW QUESTION # 16
During his secure code review, John, an independent application security expert, found that the developer has used Java code as highlighted in the following screenshot. Identify the security mistake committed by the developer?
- A. He is trying to use Whitelisting Input Validation
- B. He is trying to use Blacklisting Input Validation
- C. He is trying to use Parametrized SQL Query
- D. He is trying to use Non-parametrized SQL query
Answer: D
NEW QUESTION # 17
Identify the type of encryption depicted in the following figure.
- A. Digital Signature
- B. Asymmetric Encryption
- C. Hashing
- D. Symmetric Encryption
Answer: D
NEW QUESTION # 18
In which phase of secure development lifecycle the threat modeling is performed?
- A. Testing phase
- B. Design phase
- C. Deployment phase
- D. Coding phase
Answer: B
NEW QUESTION # 19
Suppose there is a productList.jsp page, which displays the list of products from the database for the requested product category. The product category comes as a request parameter value. Which of the following line of code will you use to strictly validate request parameter value before processing it for execution?
- A. public boolean validateUserName() { Pattern p = Pattern.compile("[a-zA-Z0-9]*$"); Matcher m = p.matcher(request.getParameter(CatId")); boolean result = m.matches(); return result;}
- B. public boolean validateUserName() { if(request.getParameter("CatId")!=null ) String CategoryId=request.getParameter("CatId");}
- C. public.boolean validateUserName() { if(!request.getParamcter("CatId").equals("null"))}
- D. public boolean validateUserName() {String CategoryId= request.getParameter("CatId");}
Answer: A
NEW QUESTION # 20
In a certain website, a secure login feature is designed to prevent brute-force attack by implementing account lockout mechanism. The account will automatically be locked after five failed attempts. This feature will not allow the users to login to the website until their account is unlocked. However, there is a possibility that this security feature can be abused to perform __________ attack.
- A. Failure to Restrict URL
- B. Broken Authentication
- C. Denial-of-Service [Do
- D. Unvalidated Redirects and Forwards
Answer: C
NEW QUESTION # 21
Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?
- A. DREAD
- B. STRIDE
- C. SMART
- D. RED
Answer: B
NEW QUESTION # 22
The threat modeling phase where applications are decomposed and their entry points are reviewed from an attacker's perspective is known as ________
- A. Attack Surface Evaluation
- B. Threat Identification
- C. Threat Classification
- D. Impact Analysis
Answer: A
NEW QUESTION # 23
Which of the following relationship is used to describe abuse case scenarios?
- A. Threatens Relationship
- B. Mitigates Relationship
- C. Extend Relationship
- D. Include Relationship
Answer: A
NEW QUESTION # 24
Which of the following method will you use in place of ex.printStackTrace() method to avoid printing stack trace on error?
- A. ex.StackTrace.getError();
- B. ex.getError();
- C. ex.getMessage();
- D. ex.message();
Answer: C
NEW QUESTION # 25
Thomas is not skilled in secure coding. He neither underwent secure coding training nor is aware of the consequences of insecure coding. One day, he wrote code as shown in the following screenshot. He passed 'false' parameter to setHttpOnly() method that may result in the existence of a certain type of vulnerability. Identify the attack that could exploit the vulnerability in the above case.
- A. Denial-of-Service attack
- B. SQL Injection Attack
- C. Directory Traversal Attack
- D. Client-Side Scripts Attack
Answer: D
NEW QUESTION # 26
Which of the following elements in web.xml file ensures that cookies will be transmitted over an encrypted channel?
- A. < connector SSLEnabled="true" / >
- B. < connector lsSSLEnabled="Yes" / >
- C. < connector EnableSSL="true" / >
- D. < connector SSLEnabled="false" / >
Answer: A
NEW QUESTION # 27
Which of the following configuration settings in server.xml will allow Tomcat server administrator to impose limit on uploading file based on their size?
- A. < connector... maxPostSize="file size" / >
- B. < connector... maxFileSize="file size" / >
- C. < connector... maxFileLimit="file size" / >
- D. < connector... maxPostSize="0"/>
Answer: A
NEW QUESTION # 28
Jacob, a Security Engineer of the testing team, was inspecting the source code to find security vulnerabilities.
Which type of security assessment activity Jacob is currently performing?
- A. CAST
- B. CAST
- C. ISCST
- D. SAST
Answer: D
NEW QUESTION # 29
......
Latest 2024 Realistic Verified 312-96 Dumps: https://www.testinsides.top/312-96-dumps-review.html
Pass Your ECCouncil 312-96 Exam with Correct 49 Questions and Answers: https://drive.google.com/open?id=10jgwhnc4t40DlkrPHoYCfQpiRVb1R6Pq