2024 Updated Verified 312-96 Downloadable Printable Exam Dumps
The Ultimate ECCouncil 312-96 Dumps PDF Review
NEW QUESTION # 23
Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?
- A. STRIDE
- B. RED
- C. DREAD
- D. SMART
Answer: A
NEW QUESTION # 24
In which phase of secure development lifecycle the threat modeling is performed?
- A. Deployment phase
- B. Testing phase
- C. Coding phase
- D. Design phase
Answer: D
NEW QUESTION # 25
A developer to handle global exception should use _________ annotation along with @ExceptionHandler method annotation for any class
- A. @ControllerAdvice
- B. @Advice
- C. @globalControllerAdvice
- D. @GlobalAdvice
Answer: A
NEW QUESTION # 26
Which of the following configurations can help you avoid displaying server names in server response header?
- A. < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" Server = " " redirectPort="8443" / >
- B. < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" ServerName ="null " redirectPort="8443'' / >
- C. < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" ServerName=" disable" redirectPort="8443" / >
- D. < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort= "8443" / >
Answer: C
NEW QUESTION # 27
Which of the following Spring Security Framework configuration setting will ensure the protection from session fixation attacks by not allowing authenticated user to login again?
- A. session-fixation-protection =".
- B. session-fixation-protection ="newSessionlD"
- C. session-fixation-protection ="enabled"
- D. session-fixation-protection =".
Answer: D
NEW QUESTION # 28
Identify the type of encryption depicted in the following figure.
- A. Hashing
- B. Symmetric Encryption
- C. Asymmetric Encryption
- D. Digital Signature
Answer: B
NEW QUESTION # 29
Which of the following state management method works only for a sequence of dynamically generated forms?
- A. Cookies
- B. URL-rewriting
- C. Sessions
- D. Hidden Field
Answer: D
NEW QUESTION # 30
Identify the type of attack depicted in the following figure.
- A. Denial-of-Service Attack
- B. Parameter Tampering Attack
- C. SQL Injection Attacks
- D. Session Fixation Attack
Answer: B
NEW QUESTION # 31
Identify what should NOT be catched while handling exceptions.
- A. NullPointerException
- B. SecurityException
- C. IllegalAccessException
- D. EOFException
Answer: B
NEW QUESTION # 32
Oliver is a web server admin and wants to configure the Tomcat server in such a way that it should not serve index pages in the absence of welcome files. Which of the following settings in CATALINA_HOME/conf/ in web.xml will solve his problem?
- A. < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name > < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > false < /param-value > < /init-param > < load-on-startup > 1 < /load-on-startup > < servlet >
- B. < servlet > < servlet-name > default < servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name> < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > true < /param-value > < /init-param > < load-on-startup > l < /load-on-startup > < /servlet >
- C. < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name > < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > disable < /param-value> < /init-param > < load-on-startup > 1 < /load-on-startup> < /servlet >
- D. < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name>< param-value> 0 < /param value>< /init-param > < init-param > < param-name> listings < /param-name > < param-value > enable < /param-value > < /init-param > < load-on-startup> 1 < /load-on-startup > < /servlet >
Answer: C
NEW QUESTION # 33
Which of the following relationship is used to describe security use case scenario?
- A. Threatens Relationship
- B. Extend Relationship
- C. Include Relationship
- D. Mitigates Relationship
Answer: B
NEW QUESTION # 34
Which of the following method will you use in place of ex.printStackTrace() method to avoid printing stack trace on error?
- A. ex.getMessage();
- B. ex.getError();
- C. ex.message();
- D. ex.StackTrace.getError();
Answer: A
NEW QUESTION # 35
Which of the following method will help you check if DEBUG level is enabled?
- A. EnableDebug ()
- B. DebugEnabled()
- C. isDebugEnabled()
- D. IsEnableDebug ()
Answer: C
NEW QUESTION # 36
Jacob, a Security Engineer of the testing team, was inspecting the source code to find security vulnerabilities.
Which type of security assessment activity Jacob is currently performing?
- A. CAST
- B. CAST
- C. SAST
- D. ISCST
Answer: C
NEW QUESTION # 37
Identify the type of attack depicted in the figure below:
- A. Directory traversal attack
- B. Parameter/form attack
- C. SQL injection attack
- D. Session fixation attack
Answer: D
NEW QUESTION # 38
Which of the following elements in web.xml file ensures that cookies will be transmitted over an encrypted channel?
- A. < connector SSLEnabled="true" / >
- B. < connector EnableSSL="true" / >
- C. < connector SSLEnabled="false" / >
- D. < connector lsSSLEnabled="Yes" / >
Answer: A
NEW QUESTION # 39
Which line of the following example of Java Code can make application vulnerable to a session attack?
- A. Line No. 5
- B. Line No. 4
- C. Line No. 3
- D. Line No. 1
Answer: C
NEW QUESTION # 40
Which of the following DFD component is used to represent the change in privilege levels?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION # 41
Identify the type of attack depicted in the following figure.
- A. Denial-of-service attack
- B. Directory Traversal Attack
- C. SQL Injection attack
- D. Form Tampering Attack
Answer: B
NEW QUESTION # 42
......
Achive your Success with Latest 312-96 Exam: https://pass4sure.verifieddumps.com/312-96-valid-exam-braindumps.html
