Free Certified Application Security Engineer (CASE) JAVA Exam 312-96 Exam Practice Test

Suppose there is a productList.jsp page, which displays the list of products from the database for the requested product category. The product category comes as a request parameter value. Which of the following line of code will you use to strictly validate request parameter value before processing it for execution?

• public boolean validateUserName() {String CategoryId= request.getParameter("CatId");}
• public boolean validateUserName() { Pattern p = Pattern.compile("[a-zA-Z0-9]*$"); Matcher m = p.matcher(request.getParameter(CatId")); boolean result = m.matches(); return result;}
• public boolean validateUserName() { if(request.getParameter("CatId")!=null ) String CategoryId=request.getParameter("CatId");}
• public.boolean validateUserName() { if(!request.getParamcter("CatId").equals("null"))}

Which of the following is used to mapCustom Exceptions to Statuscode?

• @ResponseStatus
• @ResponseStatusCode
• @ResponseCode
• @ScacusCode

Which of the following Spring Security Framework configuration setting will ensure the protection from session fixation attacks by not allowing authenticated user to login again?

• session-fixation-protection ="newSessionlD"
• session-fixation-protection =".
• session-fixation-protection ="enabled"
• session-fixation-protection =".

Ted is an application security engineer who ensures application security activities are being followed during the entire lifecycle of the project. One day, he was analyzing various interactions of users depicted in the use cases of the project under inception. Based on the use case in hand, he started depicting the scenarios where attacker could misuse the application. Can you identify the activity on which Ted is working?

• Ted was depicting abuse cases
• Ted was depicting abstract use cases
• Ted was depicting lower-level use cases
• Ted was depicting security use cases

Which of the following configurations can help you avoid displaying server names in server response header?

• < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort= "8443"/ >
• < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" ServerName=" disable" redirectPort="8443" / >
• < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" Server = " " redirectPort="8443" / >
• < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" ServerName ="null " redirectPort="8443'' / >

Identify the formula for calculating the risk during threat modeling.

• RISK = PROBABILITY "Attack
• RISK = PROBABILITY " ASSETS
• RISK = PROBABILITY * DAMAGE POTENTIAL
• IRISK = PROBABILITY * VULNERABILITY

Which of the following state management method works only for a sequence of dynamically generated forms?

• Cookies
• Sessions
• Hidden Field
• URL-rewriting

Which of the following relationship is used to describe security use case scenario?

• Threatens Relationship
• Extend Relationship
• Mitigates Relationship
• Include Relationship