Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Certified Application Security Engineer (CASE) JAVA Practice Questions

Question # 11

To enable the struts validator on an application, which configuration setting should be applied in the struts validator configuration file?

Question # 11

Options:

A.  

valid ate-'true"

B.  

lsNotvalidate="disabled"

C.  

lsNotvalidate="false"

D.  

validate="enabled"

Discussion 0
Question # 12

Stephen is a web developer in the InterCall Systems. He was working on a Real Estate website for one of his clients. He was given a task to design a web page with properties search feature. He designed the following searchpage.jsp

< form Id="form1" method="post" action="SearchProperty.jsp" >

< input type="text" id=''txt_Search" name="txt_Search" placeholder="Search Property..." / >

< input type="Submit" Id="Btn_Search" value="Search" / >

< /form >

However, when the application went to security testing phase, the security tester found an XSS vulnerability on this page. How can he mitigate the XSS vulnerability on this page?

Options:

A.  

He should write code like out-Write ("You Searched for:" +ESAPI.encoder().encodeForHTML(search));

B.  

He should write code like out.write ("You Searched for:" + request.qetParameter("search"l.toStrinq(ll;

C.  

He should write code like out.write ("You Searched for:" + request.qetParameterf'txt Search"));

D.  

He should write code like out.write (("You Searched for:" +(search));

Discussion 0
Question # 13

Which of the following can be derived from abuse cases to elicit security requirements for software system?

Options:

A.  

Misuse cases

B.  

Data flow diagram

C.  

Use cases

D.  

Security use cases

Discussion 0
Question # 14

In a certain website, a secure login feature is designed to prevent brute-force attack by implementing account lockout mechanism. The account will automatically be locked after five failed attempts. This feature will not allow the users to login to the website until their account is unlocked. However, there is a possibility that this security feature can be abused to perform __________ attack.

Options:

A.  

Failure to Restrict URL

B.  

Broken Authentication

C.  

Unvalidated Redirects and Forwards

D.  

Denial-of-Service [Do

Discussion 0

312-96 PDF

312-96 PDF (Printable)
$54.25
$154.99

312-96 Testing Engine

312-96 PDF (Printable)
$59.5
$169.99

312-96 PDF + Testing Engine

312-96 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions