GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

Questões - Security in web applications

Luis Felipe Guariento 11 questions

Take the quiz

Questions in this quiz (11)

  1. 1Which of the following correctly defines data integrity? (Select one)
    1. AIt guarantees that information is accessible only to certain users.
    2. BIt guarantees that the information is kept in encrypted form on the server.
    3. CIt guarantees that unintended parties cannot read the information during transmission between the client and the server.
    4. DIt guarantees that the information is not altered during transmission between the client and the server.
  2. 2What is the term for determining whether a user has access to a particular resource? (Select one)
    1. AAuthorization
    2. BAuthentication
    3. CConfidentiality
    4. DSecrecy
  3. 3Which one of the following must be done before authorization takes place? (Select one)
    1. AData validation
    2. BUser authentication
    3. CData encryption
    4. DData compression
  4. 4Which of the following actions would you take to prevent your web site from being attacked? (Select three)
    1. ABlock network traffic at all the ports except the HTTP port.
    2. BAudit the usage pattern of your server.
    3. CAudit the Servlet/JSP code.
    4. DUse HTTPS instead of HTTP.
    5. EDesign and develop your web application using a software engineering methodology.
    6. FUse design patterns.
  5. 5Identify the authentication mechanisms that are built into the HTTP specification. (Select two)
    1. ABasic
    2. BClient-Cert
    3. CForm
    4. DDigest
    5. EClient-Digest
    6. FHTTPS
  6. 6Which of the following deployment descriptor elements is used for specifying the authentication mechanism for a web application? (Select one)
    1. Asecurity-constraint
    2. Bauth-constraint
    3. Clogin-config
    4. Dweb-resource-collection
  7. 7Which of the following elements are used for defining a security constraint? Choose only those elements that come directly under the security constraint element. (Select three)
    1. Alogin-config
    2. Brole-name
    3. Crole
    4. Dtransport-guarantee
    5. Euser-data-constraint
    6. Fauth-constraint
    7. Gauthorization-constraint
    8. Hweb-resource-collection
  8. 8Which of the following web.xml snippets correctly identifies all HTML files under the sales directory? (Select two)
    1. A<web-resource-collection>
      <web-resource-name>reports</web-resource-name>
      <url-pattern>/sales/*.html</url-pattern>
      </web-resource-collection>
    2. B<resource-collection>
      <web-resource-name>reports</web-resource-name>
      <url-pattern>/sales/*.html</url-pattern>
      </resource-collection>
    3. C<resource-collection>
      <resource-name>reports</resource-name>
      <url-pattern>/sales/*.html</url-pattern>
      </resource-collection>
    4. D<web-resource-collection>
      <web-resource-name>reports</web-resource-name>
      <url-pattern>/sales/*.html</url-pattern>
      <http-method>GET</http-method>
      </web-resource-collection>
  9. 9You want your PerformanceReportServlet to be accessible only to managers. This servlet generates a performance report in the doPost() method based on a FORM submitted by a user. Which of the following correctly defines a security constraint for this purpose? (Select one).
    1. A<security-constraint>
      <web-resource-collection>
      <web-resource-name>performance report</web-resource-name>
      <url-pattern>/servlet/PerformanceReportServlet</url-pattern>
      <http-method>GET</http-method>
      </web-resource-collection>
      <auth-constraint>
      <role-name>manager</role-name>
      </auth-constraint>
      <user-data-constraint>
      <transport-guarantee>NONE</transport-guarantee>
      </user-data-constraint>
      </security-constraint>
    2. B<security-constraint>
      <web-resource-collection>
      <web-resource-name>performance report</web-resource-name>
      <url-pattern>/servlet/PerformanceReportServlet</url-pattern>
      <http-method>*</http-method>
      </web-resource-collection>
      <accessibility>
      <role-name>manager</role-name>
      </accessibility>
      <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
      </security-constraint>
    3. C<security-constraint>
      <web-resource-collection>
      <web-resource-name>performance report</web-resource-name>
      <url-pattern>/servlet/PerformanceReportServlet</url-pattern>
      <http-method>POST</http-method>
      </web-resource-collection>
      <accessibility>
      <role-name>manager</role-name>
      </accessibility>
      <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
      </security-constraint>
    4. D<security-constraint>
      <web-resource-collection>
      <web-resource-name>performance report</web-resource-name>
      <url-pattern>/servlet/PerformanceReportServlet</url-pattern>
      <http-method>POST</http-method>
      </web-resource-collection>
      <auth-constraint>
      <role-name>manager</role-name>
      </auth-constraint>
      </security-constraint>
  10. 10Which of the following statements regarding authentication mechanisms are correct? (Select two)
    1. AThe HTTP Basic mechanism transmits the username/password “in the open.”
    2. BThe HTTP Basic mechanism uses HTML FORMs to collect usernames/passwords.
    3. CThe transmission method in the Basic and FORM mechanisms is the same.
    4. DThe method of capturing the usernames/passwords in the Basic and FORM mechanisms is the same.

Information

Description
Concursos Públicos Desenvolvimento de Software (OCEJWCD 6 ONLINE COURSE) Quiz on Questões - Security in web applications, created by Luis Felipe Guariento on 13/04/2018.
Language
Português
Views
0
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?