[Q18-Q40] Free Sales Ending Soon – Use Real 312-96 PDF Questions [Jan 24, 2024]

5/5 - (2 votes)

Free Sales Ending Soon – Use Real 312-96 PDF Questions [Jan 24, 2024]

Updated Jan-2024 Exam 312-96 Dumps – Pass Your Certification Exam

EC-Council CASE Java Exam Certification Details:

Schedule Exam	Pearson VUE OREC-Council Store,ECC Exam Center
Sample Questions	EC-Council CASE Java Sample Questions
Passing Score	70%
Books / Training	Master Class
Duration	120 mins

NO.18 Which of the following relationship is used to describe security use case scenario?

Threatens Relationship

Extend Relationship

Mitigates Relationship

Include Relationship

NO.19 Identify the type of attack depicted in the figure below:

SQL injection attack

Parameter/form attack

Directory traversal attack

Session fixation attack

NO.20 Which of the following DFD component is used to represent the change in privilege levels?

NO.21 Oliver, a Server Administrator (Tomcat), has set configuration in web.xml file as shown in the following screenshot. What is he trying to achieve?

He wants to transfer the entire data over encrypted channel

He wants to transfer only response parameter data over encrypted channel

He wants to transfer only request parameter data over encrypted channel

He wants to transfer only Session cookies over encrypted channel

NO.22 Which of the following is used to mapCustom Exceptions to Statuscode?

@ResponseStatus

@ResponseStatusCode

@ResponseCode

@ScacusCode

NO.23 Identify the type of attack depicted in the following figure.

SQL Injection Attacks

Session Fixation Attack

Parameter Tampering Attack

Denial-of-Service Attack

NO.24 Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?

DREAD

SMART

STRIDE

RED

NO.25 During his secure code review, John, an independent application security expert, found that the developer has used Java code as highlighted in the following screenshot. Identify the security mistake committed by the developer?

He is trying to use Whitelisting Input Validation

He is trying to use Non-parametrized SQL query

He is trying to use Blacklisting Input Validation

He is trying to use Parametrized SQL Query

NO.26 Which of the following elements in web.xml file ensures that cookies will be transmitted over an encrypted channel?

< connector lsSSLEnabled=”Yes” / >

< connector EnableSSL=”true” / >

< connector SSLEnabled=”false” / >

< connector SSLEnabled=”true” / >

NO.27 Alice, a security engineer, was performing security testing on the application. He found that users can view the website structure and file names. As per the standard security practices, this can pose a serious security risk as attackers can access hidden script files in your directory. Which of the following will mitigate the above security risk?

< int-param > < param-name>directory-listinqs < param-value>true < /init-param >

< int param > < param-name>directorv-listinqs < param-value>false < /init-param >

< int-param > < param-name>listinqs < param-value>true < /init-param

< int-param > < param-name>listinqs < param-value>false < /init-param >

NO.28 Which of the following configurations can help you avoid displaying server names in server response header?

< Connector port=”8080″ protocol=”HTTP/1.1″ connectionTimeout=”20000″ redirectPort= “8443” / >

< Connector port=”8080″ protocol=”HTTP/1.1″ connectionTimeout=”20000″ ServerName=” disable” redirectPort=”8443″ / >

< Connector port=”8080″ protocol=”HTTP/1.1″ connectionTimeout=”20000″ Server = ” ” redirectPort=”8443″ / >

< Connector port=”8080″ protocol=”HTTP/1.1″ connectionTimeout=”20000″ ServerName =”null ” redirectPort=”8443” / >

NO.29 Alice, a Server Administrator (Tomcat), wants to ensure that Tomcat can be shut down only by the user who owns the Tomcat process. Select the appropriate setting of the CATALINA_HOME/conf in server.xml that will enable him to do so.

< server port=”” shutdown-“‘ >

< server port=”-1″ shutdown-*” >

< server port=”-1″ shutdown=”SHUTDOWN” >

< server port=”8080″ shutdown=”SHUTDOWN” >

NO.30 Identify the formula for calculating the risk during threat modeling.

RISK = PROBABILITY “Attack

RISK = PROBABILITY ” ASSETS

RISK = PROBABILITY * DAMAGE POTENTIAL

IRISK = PROBABILITY * VULNERABILITY

NO.31 Which of the following can be derived from abuse cases to elicit security requirements for software system?

Misuse cases

Data flow diagram

Use cases

Security use cases

NO.32 Which of the following method will you use in place of ex.printStackTrace() method to avoid printing stack trace on error?

ex.StackTrace.getError();

ex.message();

ex.getMessage();

ex.getError();

NO.33 Identify the type of encryption depicted in the following figure.

Asymmetric Encryption

Digital Signature

Symmetric Encryption

Hashing

NO.34 Which of the following state management method works only for a sequence of dynamically generated forms?

Sessions

Hidden Field

URL-rewriting

NO.35 Stephen is a web developer in the InterCall Systems. He was working on a Real Estate website for one of his clients. He was given a task to design a web page with properties search feature. He designed the following searchpage.jsp
< form Id=”form1″ method=”post” action=”SearchProperty.jsp” >
< input type=”text” id=”txt_Search” name=”txt_Search” placeholder=”Search Property…” / >
< input type=”Submit” Id=”Btn_Search” value=”Search” / >
< /form >
However, when the application went to security testing phase, the security tester found an XSS vulnerability on this page. How can he mitigate the XSS vulnerability on this page?

He should write code like out-Write (“You Searched for:” +ESAPI.encoder().encodeForHTML(search));

He should write code like out.write (“You Searched for:” + request.qetParameter(“search”l.toStrinq(ll;

He should write code like out.write (“You Searched for:” + request.qetParameterf’txt Search”));

He should write code like out.write ((“You Searched for:” +(search));

NO.36 Which of the following method will help you check if DEBUG level is enabled?

isDebugEnabled()

EnableDebug ()

IsEnableDebug ()

DebugEnabled()

Loading …

312-96 Dumps To Pass Application Security Exam in One Day: https://www.testsimulate.com/312-96-study-materials.html

EC-Council CASE Java Exam Certification Details:

Leave a Reply Cancel reply