GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

Questões - Web Application Security

Luis Felipe Guariento 15 Fragen

Quiz starten

Fragen in diesem Quiz (15)

  1. 1How do we write the code to allow unauthenticated access for users of all rules?
    1. A< auth-constraint >
      < role-name >*< /role-name >
      < /auth-constraint >
    2. B< auth-constraint >
      < role-name >Guest< /role-name >
      < /auth-constraint >
    3. C< security-constraint >
      < auth-constraint / >
      < / security-constraint >
    4. DNone of the Options
  2. 2How do we write the code to allow authenticated access for users of all rules?
    1. A< auth-constraint >
      < role-name >*< / role-name>
      < /auth-constraint>
    2. B< auth-constraint >
      < role-name >Guest< / role-name>
      < /auth-constraint>
    3. C< security-constraint >
      ...
      < web-resource-collection >
      ...
      < /web-resource-collection >
      < /security-constraint >
    4. DNone of the Options
  3. 3What is the result of this code?

    < security-constraint >
    < auth-constraint / >
    < / security-constraint>
    1. AAllows authenticated access to all users.
    2. BAllows unauthenticated access to all users.
    3. CAllows authenticated access only for the default "Guest" role.
    4. DThe Container will not allow access to constrained resources for any roles.
  4. 4How many values can be declared for the < transport-guarantee > element of the < user-data-constraint > ?
    1. A1
    2. B2
    3. C3
    4. D4
  5. 5Confidentiality is:
    1. ASecuring data in transit.
    2. BIdentifying the user by means of name and password.
    3. CMaking sure that data is not tampered during transit.
    4. DDeciding on the resources to access based on the role of the user.
  6. 6If data in transit should not be tampered, it is:
    1. AData Integrity
    2. BAuthentication
    3. CConfidentiality
    4. DAuthorization
  7. 7Before assigning users to roles according to each JavaEE server, what should be done?
    1. ASpecify the users in the deployment descriptor.
    2. BDeclare all roles specified in the application in the Deployment Descriptor.
    3. CNothing needs to be done.
    4. DNone of the options.
  8. 8There can be more than one < web-resource-name > element per collection.
    1. ARichtig
    2. BFalsch
  9. 9What is the meaning of the above deployment descriptor?

    <web-app>
    .........
    < security-constraint >
    < web-resource-collection >
    < web-resource-name > Whizlabs < / web-resource-name >
    < url-pattern > /whizlabs/* < / url-pattern >
    < / web-resource-collection>
    < auth-constraint >
    < role-name> Member < / role-name >
    < / auth-constraint >
    < / security-constraint >
    1. ABy default only the GET method is protected.
    2. BNone of the methods are protected.
    3. CThe POST method is protected.
    4. DAll the methods are protected.
  10. 10What is wrong with the above code?

    <web-app>
    ......
    < security-constraint >
    < web-resource-collection >
    < web-resource-name >Whizlabs< / web-resource-name >
    < web-resource-name >OCWCD< / web-resource-name >
    < url-pattern >/whizlabs/*< / url-pattern >
    < / web-resource-collection >
    < auth-constraint >
    < role-name > Guest < / role-name >
    < / auth-constraint >
    < / security-constraint >
    < / web-app >
    1. ANothing is wrong with this code.
    2. BThe < url-pattern > must be specified befor the < web-resource-name > element.
    3. CThere can be only one < web-resource-name > element.
    4. DThe < role-name > is not a valid element of < auth-constraint >

Informationen

Beschreibung
Concursos Públicos Desenvolvimento de Software (OCEJWCD 6 ONLINE COURSE) Quiz am Questões - Web Application Security, erstellt von Luis Felipe Guariento am 22/02/2018.
Sprache
Português
Aufrufe
0
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck