O GoConqr está de visual novo! Conte para nós o que você achou.

Registre-se grátis

Quiz

Questões - Web Application Security

Luis Felipe Guariento 15 perguntas

Fazer o quiz

Perguntas do quiz (15)

  1. 1How do we write the code to allow unauthenticated access for users of all rules?
    1. A< auth-constraint >
      < role-name >*< /role-name >
      < /auth-constraint >
    2. B< auth-constraint >
      < role-name >Guest< /role-name >
      < /auth-constraint >
    3. C< security-constraint >
      < auth-constraint / >
      < / security-constraint >
    4. DNone of the Options
  2. 2How do we write the code to allow authenticated access for users of all rules?
    1. A< auth-constraint >
      < role-name >*< / role-name>
      < /auth-constraint>
    2. B< auth-constraint >
      < role-name >Guest< / role-name>
      < /auth-constraint>
    3. C< security-constraint >
      ...
      < web-resource-collection >
      ...
      < /web-resource-collection >
      < /security-constraint >
    4. DNone of the Options
  3. 3What is the result of this code?

    < security-constraint >
    < auth-constraint / >
    < / security-constraint>
    1. AAllows authenticated access to all users.
    2. BAllows unauthenticated access to all users.
    3. CAllows authenticated access only for the default "Guest" role.
    4. DThe Container will not allow access to constrained resources for any roles.
  4. 4How many values can be declared for the < transport-guarantee > element of the < user-data-constraint > ?
    1. A1
    2. B2
    3. C3
    4. D4
  5. 5Confidentiality is:
    1. ASecuring data in transit.
    2. BIdentifying the user by means of name and password.
    3. CMaking sure that data is not tampered during transit.
    4. DDeciding on the resources to access based on the role of the user.
  6. 6If data in transit should not be tampered, it is:
    1. AData Integrity
    2. BAuthentication
    3. CConfidentiality
    4. DAuthorization
  7. 7Before assigning users to roles according to each JavaEE server, what should be done?
    1. ASpecify the users in the deployment descriptor.
    2. BDeclare all roles specified in the application in the Deployment Descriptor.
    3. CNothing needs to be done.
    4. DNone of the options.
  8. 8There can be more than one < web-resource-name > element per collection.
    1. AVerdadeiro
    2. BFalso
  9. 9What is the meaning of the above deployment descriptor?

    <web-app>
    .........
    < security-constraint >
    < web-resource-collection >
    < web-resource-name > Whizlabs < / web-resource-name >
    < url-pattern > /whizlabs/* < / url-pattern >
    < / web-resource-collection>
    < auth-constraint >
    < role-name> Member < / role-name >
    < / auth-constraint >
    < / security-constraint >
    1. ABy default only the GET method is protected.
    2. BNone of the methods are protected.
    3. CThe POST method is protected.
    4. DAll the methods are protected.
  10. 10What is wrong with the above code?

    <web-app>
    ......
    < security-constraint >
    < web-resource-collection >
    < web-resource-name >Whizlabs< / web-resource-name >
    < web-resource-name >OCWCD< / web-resource-name >
    < url-pattern >/whizlabs/*< / url-pattern >
    < / web-resource-collection >
    < auth-constraint >
    < role-name > Guest < / role-name >
    < / auth-constraint >
    < / security-constraint >
    < / web-app >
    1. ANothing is wrong with this code.
    2. BThe < url-pattern > must be specified befor the < web-resource-name > element.
    3. CThere can be only one < web-resource-name > element.
    4. DThe < role-name > is not a valid element of < auth-constraint >

Informações

Descrição
Concursos Públicos Desenvolvimento de Software (OCEJWCD 6 ONLINE COURSE) Quiz sobre Questões - Web Application Security, criado por Luis Felipe Guariento em 22-02-2018.
Idioma
Português
Visualizações
0
Avaliação
Ainda sem avaliações
Avalie este quiz
Avalie este quiz

Fale Conosco

Sobre o que é sua mensagem?

O que você acha do novo visual?

Você gostou?