GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

Questões - Security in web applications

Luis Felipe Guariento 11 Fragen

Quiz starten

Fragen in diesem Quiz (11)

  1. 1Which of the following correctly defines data integrity? (Select one)
    1. AIt guarantees that information is accessible only to certain users.
    2. BIt guarantees that the information is kept in encrypted form on the server.
    3. CIt guarantees that unintended parties cannot read the information during transmission between the client and the server.
    4. DIt guarantees that the information is not altered during transmission between the client and the server.
  2. 2What is the term for determining whether a user has access to a particular resource? (Select one)
    1. AAuthorization
    2. BAuthentication
    3. CConfidentiality
    4. DSecrecy
  3. 3Which one of the following must be done before authorization takes place? (Select one)
    1. AData validation
    2. BUser authentication
    3. CData encryption
    4. DData compression
  4. 4Which of the following actions would you take to prevent your web site from being attacked? (Select three)
    1. ABlock network traffic at all the ports except the HTTP port.
    2. BAudit the usage pattern of your server.
    3. CAudit the Servlet/JSP code.
    4. DUse HTTPS instead of HTTP.
    5. EDesign and develop your web application using a software engineering methodology.
    6. FUse design patterns.
  5. 5Identify the authentication mechanisms that are built into the HTTP specification. (Select two)
    1. ABasic
    2. BClient-Cert
    3. CForm
    4. DDigest
    5. EClient-Digest
    6. FHTTPS
  6. 6Which of the following deployment descriptor elements is used for specifying the authentication mechanism for a web application? (Select one)
    1. Asecurity-constraint
    2. Bauth-constraint
    3. Clogin-config
    4. Dweb-resource-collection
  7. 7Which of the following elements are used for defining a security constraint? Choose only those elements that come directly under the security constraint element. (Select three)
    1. Alogin-config
    2. Brole-name
    3. Crole
    4. Dtransport-guarantee
    5. Euser-data-constraint
    6. Fauth-constraint
    7. Gauthorization-constraint
    8. Hweb-resource-collection
  8. 8Which of the following web.xml snippets correctly identifies all HTML files under the sales directory? (Select two)
    1. A<web-resource-collection>
      <web-resource-name>reports</web-resource-name>
      <url-pattern>/sales/*.html</url-pattern>
      </web-resource-collection>
    2. B<resource-collection>
      <web-resource-name>reports</web-resource-name>
      <url-pattern>/sales/*.html</url-pattern>
      </resource-collection>
    3. C<resource-collection>
      <resource-name>reports</resource-name>
      <url-pattern>/sales/*.html</url-pattern>
      </resource-collection>
    4. D<web-resource-collection>
      <web-resource-name>reports</web-resource-name>
      <url-pattern>/sales/*.html</url-pattern>
      <http-method>GET</http-method>
      </web-resource-collection>
  9. 9You want your PerformanceReportServlet to be accessible only to managers. This servlet generates a performance report in the doPost() method based on a FORM submitted by a user. Which of the following correctly defines a security constraint for this purpose? (Select one).
    1. A<security-constraint>
      <web-resource-collection>
      <web-resource-name>performance report</web-resource-name>
      <url-pattern>/servlet/PerformanceReportServlet</url-pattern>
      <http-method>GET</http-method>
      </web-resource-collection>
      <auth-constraint>
      <role-name>manager</role-name>
      </auth-constraint>
      <user-data-constraint>
      <transport-guarantee>NONE</transport-guarantee>
      </user-data-constraint>
      </security-constraint>
    2. B<security-constraint>
      <web-resource-collection>
      <web-resource-name>performance report</web-resource-name>
      <url-pattern>/servlet/PerformanceReportServlet</url-pattern>
      <http-method>*</http-method>
      </web-resource-collection>
      <accessibility>
      <role-name>manager</role-name>
      </accessibility>
      <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
      </security-constraint>
    3. C<security-constraint>
      <web-resource-collection>
      <web-resource-name>performance report</web-resource-name>
      <url-pattern>/servlet/PerformanceReportServlet</url-pattern>
      <http-method>POST</http-method>
      </web-resource-collection>
      <accessibility>
      <role-name>manager</role-name>
      </accessibility>
      <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
      </security-constraint>
    4. D<security-constraint>
      <web-resource-collection>
      <web-resource-name>performance report</web-resource-name>
      <url-pattern>/servlet/PerformanceReportServlet</url-pattern>
      <http-method>POST</http-method>
      </web-resource-collection>
      <auth-constraint>
      <role-name>manager</role-name>
      </auth-constraint>
      </security-constraint>
  10. 10Which of the following statements regarding authentication mechanisms are correct? (Select two)
    1. AThe HTTP Basic mechanism transmits the username/password “in the open.”
    2. BThe HTTP Basic mechanism uses HTML FORMs to collect usernames/passwords.
    3. CThe transmission method in the Basic and FORM mechanisms is the same.
    4. DThe method of capturing the usernames/passwords in the Basic and FORM mechanisms is the same.

Informationen

Beschreibung
Concursos Públicos Desenvolvimento de Software (OCEJWCD 6 ONLINE COURSE) Quiz am Questões - Security in web applications, erstellt von Luis Felipe Guariento am 13/04/2018.
Sprache
Português
Aufrufe
0
Schlagwörter
desenvolvimento de softwareocejwcd 6 online courseconcursos públicos
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck