312-96 Exam Training Practice Tests (ECCouncil Certified Application Security Engineer (CASE) JAVA)]

Question 1

Which of the following configuration settings in server.xml will allow Tomcat server administrator to impose limit on uploading file based on their size?

A. < connector... maxFileSize="file size" / > B. < connector... maxFileLimit="file size" / > C. < connector... maxPostSize="file size" / > D. < connector... maxPostSize="0"/>

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Identify what should NOT be catched while handling exceptions.

A. SecurityException B. IllegalAccessException C. EOFException D. NullPointerException

Correct Answer: A

Question 3

During his secure code review, John, an independent application security expert, found that the developer has used Java code as highlighted in the following screenshot. Identify the security mistake committed by the developer?

A. He is trying to use Blacklisting Input Validation B. He is trying to use Whitelisting Input Validation C. He is trying to use Non-parametrized SQL query D. He is trying to use Parametrized SQL Query

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?

A. RED B. SMART C. STRIDE D. DREAD

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

It is recommended that you should not use return, break, continue or throw statements in _________

A. Try-With-Resources block B. Catch block C. Try block D. Finally block

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

ECCouncil Certified Application Security Engineer (CASE) JAVA - 312-96 Exam Practice Test