最新の312-96問題集で試験を準備する

ECCouncil 312-96 試験概要:

ECCouncil 312-96 試験シラバストピック:

ECCouncil Certified Application Security Engineer (CASE) JAVA 認定 312-96 試験問題：

問題 #1

A developer to handle global exception should use _________ annotation along with @ExceptionHandler method annotation for any class

A. @ControllerAdvice
B. @globalControllerAdvice
C. @Advice
D. @GlobalAdvice

問題 #2

Alice works as a Java developer in Fygo software Services Ltd. He is given the responsibility to design a bookstore website for one of their clients. This website is supposed to store articles in .pdf format. Alice is advised by his superior to design ArticlesList.jsp page in such a way that it should display a list of all the articles in one page and should send a selected filename as a query string to redirect users to articledetails.jsp page.
Alice wrote the following code on page load to read the file name.
String myfilename = request.getParameter("filename");
String txtFileNameVariable = myfilename;
String locationVariable = request.getServletContext().getRealPath("/"); String PathVariable = ""; PathVariable = locationVariable + txtFileNameVariable; BufferedInputStream bufferedInputStream = null; Path filepath = Paths.get(PathVariable); After reviewing this code, his superior pointed out the security mistake in the code and instructed him not repeat the same in future. Can you point the type of vulnerability that may exist in the above code?

A. XSS vulnerability
B. Directory Traversal vulnerability
C. URL Tampering vulnerability
D. Form Tampering vulnerability

問題 #3

Identify the type of attack depicted in the following figure.

A. Parameter Tampering Attack
B. SQL Injection Attacks
C. Denial-of-Service Attack
D. Session Fixation Attack

問題 #4

Oliver, a Server Administrator (Tomcat), has set configuration in web.xml file as shown in the following screenshot. What is he trying to achieve?

A. He wants to transfer the entire data over encrypted channel
B. He wants to transfer only request parameter data over encrypted channel
C. He wants to transfer only response parameter data over encrypted channel
D. He wants to transfer only Session cookies over encrypted channel

問題 #5

Which of the threat classification model is used to classify threats during threat modeling process?

A. DREAD
B. RED
C. STRIDE
D. SMART

解説：