ExamGecko
Login
Home / ECCouncil / 312-96 / List of questions
Ask Question

ECCouncil 312-96 Practice Test - Questions Answers, Page 4

Add to Whishlist

List of questions

Question 31

Report Export Collapse

A developer to handle global exception should use _________ annotation along with @ExceptionHandler method annotation for any class

Become a Premium Member for full access
  Unlock Premium Member

Question 32

Report Export Collapse

Which of the following relationship is used to describe abuse case scenarios?

Become a Premium Member for full access
  Unlock Premium Member

Question 33

Report Export Collapse

To enable the struts validator on an application, which configuration setting should be applied in the struts validator configuration file?

ECCouncil 312-96 image Question 33 25336 09182024185534000000

Become a Premium Member for full access
  Unlock Premium Member

Question 34

Report Export Collapse

Suppose there is a productList.jsp page, which displays the list of products from the database for the requested product category. The product category comes as a request parameter value. Which of the following line of code will you use to strictly validate request parameter value before processing it for execution?

Become a Premium Member for full access
  Unlock Premium Member

Question 35

Report Export Collapse

A developer has written the following line of code to handle and maintain session in the application. What did he do in the below scenario?

ECCouncil 312-96 image Question 35 25338 09182024185534000000

Become a Premium Member for full access
  Unlock Premium Member

Question 36

Report Export Collapse

Which of the following configuration settings in server.xml will allow Tomcat server administrator to impose limit on uploading file based on their size?

Become a Premium Member for full access
  Unlock Premium Member

Question 37

Report Export Collapse

Identify the type of attack depicted in the following figure.

ECCouncil 312-96 image Question 37 25340 09182024185534000000

Become a Premium Member for full access
  Unlock Premium Member

Question 38

Report Export Collapse

Oliver is a web server admin and wants to configure the Tomcat server in such a way that it should not serve index pages in the absence of welcome files. Which of the following settings in CATALINA_HOME/conf/ in web.xml will solve his problem?

Become a Premium Member for full access
  Unlock Premium Member

Question 39

Report Export Collapse

The software developer has implemented encryption in the code as shown in the following screenshot.

However, using the DES algorithm for encryption is considered to be an insecure coding practice as DES is a weak encryption algorithm. Which of the following symmetric encryption algorithms will you suggest for strong encryption?

Become a Premium Member for full access
  Unlock Premium Member

Question 40

Report Export Collapse

James is a Java developer working INFR INC. He has written Java code to open a file, read it line by line and display its content in the text editor. He wants to ensure that any unhandled exception raised by the code should automatically close the opened file stream. Which of the following exception handling block should he use for the above purpose?

Become a Premium Member for full access
  Unlock Premium Member
Total 47 questions
Go to page: of 5
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Identify the type of encryption depicted in the following figure.
Stephen is a web developer in the InterCall Systems. He was working on a Real Estate website for one of his clients. He was given a task to design a web page with properties search feature. He designed the following searchpage.jsp < form Id='form1' method='post' action='SearchProperty.jsp' > < input type='text' id=''txt_Search' name='txt_Search' placeholder='Search Property...' / > < input type='Submit' Id='Btn_Search' value='Search' / > < /form > However, when the application went to security testing phase, the security tester found an XSS vulnerability on this page. How can he mitigate the XSS vulnerability on this page?
Thomas is not skilled in secure coding. He neither underwent secure coding training nor is aware of the consequences of insecure coding. One day, he wrote code as shown in the following screenshot. He passed 'false' parameter to setHttpOnly() method that may result in the existence of a certain type of vulnerability. Identify the attack that could exploit the vulnerability in the above case.
During his secure code review, John, an independent application security expert, found that the developer has used Java code as highlighted in the following screenshot. Identify the security mistake committed by the developer?
Which of the following method will you use in place of ex.printStackTrace() method to avoid printing stack trace on error?
A US-based ecommerce company has developed their website www.ec-sell.com to sell their products online. The website has a feature that allows their customer to search products based on the price. Recently, a bug bounty has discovered a security flaw in the Search page of the website, where he could see all products from the database table when he altered the website URL http://www.ec-sell.com/products.jsp?val=100 to http://www.ec-sell.com/products.jsp?val=200 OR '1'='1 -. The product.jsp page is vulnerable to
Alice, a Server Administrator (Tomcat), wants to ensure that Tomcat can be shut down only by the user who owns the Tomcat process. Select the appropriate setting of the CATALINA_HOME/conf in server.xml that will enable him to do so.
In a certain website, a secure login feature is designed to prevent brute-force attack by implementing account lockout mechanism. The account will automatically be locked after five failed attempts. This feature will not allow the users to login to the website until their account is unlocked. However, there is a possibility that this security feature can be abused to perform __________ attack.
James is a Java developer working INFR INC. He has written Java code to open a file, read it line by line and display its content in the text editor. He wants to ensure that any unhandled exception raised by the code should automatically close the opened file stream. Which of the following exception handling block should he use for the above purpose?
Oliver, a Server Administrator (Tomcat), has set configuration in web.xml file as shown in the following screenshot. What is he trying to achieve?