Latest Success Metrics For Actual 312-96 Exam 2024 Realistic Dumps [Q24-Q48]

QUESTION 24
The threat modeling phase where applications are decomposed and their entry points are reviewed from an attacker’s perspective is known as ________

QUESTION 25
Identify the type of attack depicted in the figure below:

QUESTION 26
A developer to handle global exception should use _________ annotation along with @ExceptionHandler method annotation for any class

QUESTION 27
Which of the following authentication mechanism does J2EE support?

QUESTION 28
Alice, a security engineer, was performing security testing on the application. He found that users can view the website structure and file names. As per the standard security practices, this can pose a serious security risk as attackers can access hidden script files in your directory. Which of the following will mitigate the above security risk?

QUESTION 29
During his secure code review, John, an independent application security expert, found that the developer has used Java code as highlighted in the following screenshot. Identify the security mistake committed by the developer?

QUESTION 30
Sam, an application security engineer working in INFRA INC., was conducting a secure code review on an application developed in Jav a. He found that the developer has used a piece of code as shown in the following screenshot. Identify the security mistakes that the developer has coded?

QUESTION 31
Identify the type of attack depicted in the following figure.

QUESTION 32
Jacob, a Security Engineer of the testing team, was inspecting the source code to find security vulnerabilities.
Which type of security assessment activity Jacob is currently performing?

QUESTION 33
The software developer has implemented encryption in the code as shown in the following screenshot.

However, using the DES algorithm for encryption is considered to be an insecure coding practice as DES is a weak encryption algorithm. Which of the following symmetric encryption algorithms will you suggest for strong encryption?

QUESTION 34
Which of the following DFD component is used to represent the change in privilege levels?

QUESTION 35
Which of the following Spring Security Framework configuration setting will ensure the protection from session fixation attacks by not allowing authenticated user to login again?

QUESTION 36
Which of the following configuration settings in server.xml will allow Tomcat server administrator to impose limit on uploading file based on their size?

QUESTION 37
Which of the following method will you use in place of ex.printStackTrace() method to avoid printing stack trace on error?

QUESTION 38
A US-based ecommerce company has developed their website www.ec-sell.com to sell their products online. The website has a feature that allows their customer to search products based on the price. Recently, a bug bounty has discovered a security flaw in the Search page of the website, where he could see all products from the database table when he altered the website URL http://www.ec-sell.com/products.jsp?val=100 to http://www.ec-sell.com/products.jsp?val=200 OR ‘1’=’1 -. The product.jsp page is vulnerable to

QUESTION 39
Which of the following can be derived from abuse cases to elicit security requirements for software system?

QUESTION 40
The developer wants to remove the HttpSessionobject and its values from the client’ system.
Which of the following method should he use for the above purpose?

QUESTION 41
Which of the following relationship is used to describe abuse case scenarios?

QUESTION 42
According to secure logging practices, programmers should ensure that logging processes are not disrupted by: