312-96 무료 덤프문제 온라인 액세스

Which of the following relationship is used to describe abuse case scenarios?

• A.Extend Relationship
• B.Mitigates Relationship
• C.Threatens Relationship
• D.Include Relationship

Identify what should NOT be catched while handling exceptions.

• A.NullPointerException
• B.IllegalAccessException
• C.SecurityException
• D.EOFException

Identify the type of attack depicted in the figure below:

• A.Cross-Site Request Forgery (CSRF) attack
• B.SQL injection attack
• C.Denial-of-Service attack
• D.XSS

In a certain website, a secure login feature is designed to prevent brute-force attack by implementing account lockout mechanism. The account will automatically be locked after five failed attempts. This feature will not allow the users to login to the website until their account is unlocked. However, there is a possibility that this security feature can be abused to perform __________ attack.

• A.Broken Authentication
• B.Unvalidated Redirects and Forwards
• C.Denial-of-Service [Do
• D.Failure to Restrict URL

Sam, an application security engineer working in INFRA INC., was conducting a secure code review on an application developed in Java. He found that the developer has used a piece of code as shown in the following screenshot. Identify the security mistakes that the developer has coded?

• A.He is attempting to use whitelist input validation approach
• B.He is attempting to use blacklist input validation approach
• C.He is attempting to use regular expression for validation
• D.He is attempting to use client-side validation