Latest Success Metrics For Actual 312-96 Exam 2024 Realistic Dumps [Q24-Q48]

问题 24
The threat modeling phase where applications are decomposed and their entry points are reviewed from an attacker’s perspective is known as ________

问题 25
Identify the type of attack depicted in the figure below:

问题 26
A developer to handle global exception should use _________ annotation along with @ExceptionHandler method annotation for any class

问题 27
Which of the following authentication mechanism does J2EE support?

问题 28
Alice, a security engineer, was performing security testing on the application. He found that users can view the website structure and file names. As per the standard security practices, this can pose a serious security risk as attackers can access hidden script files in your directory. Which of the following will mitigate the above security risk?

问题 29
During his secure code review, John, an independent application security expert, found that the developer has used Java code as highlighted in the following screenshot. Identify the security mistake committed by the developer?

问题 30
Sam, an application security engineer working in INFRA INC., was conducting a secure code review on an application developed in Jav a. He found that the developer has used a piece of code as shown in the following screenshot. Identify the security mistakes that the developer has coded?

问题 31
Identify the type of attack depicted in the following figure.

问题 32
Jacob, a Security Engineer of the testing team, was inspecting the source code to find security vulnerabilities.
Which type of security assessment activity Jacob is currently performing?

问题 33
The software developer has implemented encryption in the code as shown in the following screenshot.

However, using the DES algorithm for encryption is considered to be an insecure coding practice as DES is a weak encryption algorithm. Which of the following symmetric encryption algorithms will you suggest for strong encryption?

问题 34
Which of the following DFD component is used to represent the change in privilege levels?

问题 35
Which of the following Spring Security Framework configuration setting will ensure the protection from session fixation attacks by not allowing authenticated user to login again?

问题 36
Which of the following configuration settings in server.xml will allow Tomcat server administrator to impose limit on uploading file based on their size?

问题 37
Which of the following method will you use in place of ex.printStackTrace() method to avoid printing stack trace on error?

问题 38
A US-based ecommerce company has developed their website www.ec-sell.com to sell their products online. The website has a feature that allows their customer to search products based on the price. Recently, a bug bounty has discovered a security flaw in the Search page of the website, where he could see all products from the database table when he altered the website URL http://www.ec-sell.com/products.jsp?val=100 to http://www.ec-sell.com/products.jsp?val=200 OR ‘1’=’1 -. The product.jsp page is vulnerable to

问题 39
Which of the following can be derived from abuse cases to elicit security requirements for software system?

问题 40
The developer wants to remove the HttpSessionobject and its values from the client’ system.
Which of the following method should he use for the above purpose?

问题 41
Which of the following relationship is used to describe abuse case scenarios?

问题 42
According to secure logging practices, programmers should ensure that logging processes are not disrupted by: