ECCouncil Certified Application Security Engineer (CASE) JAVA

QUESTION NO: 1
Which of the following DFD component is used to represent the change in privilege levels?

A. 1 B. 3 C. 2 D. 4

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Suppose there is a productList.jsp page, which displays the list of products from the database for the requested product category. The product category comes as a request parameter value. Which of the following line of code will you use to strictly validate request parameter value before processing it for execution?

A. public boolean validateUserName() { if(request.getParameter("CatId")!=null ) String CategoryId=request.getParameter("CatId");} B. public.boolean validateUserName() { if(!request.getParamcter("CatId").equals("null"))} C. public boolean validateUserName() {String CategoryId= request.getParameter("CatId");} D. public boolean validateUserName() { Pattern p = Pattern.compile("[a-zA-Z0-9]*$"); Matcher m = p.matcher(request.getParameter(CatId")); boolean result = m.matches(); return result;}

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Which of the threat classification model is used to classify threats during threat modeling process?

A. RED B. STRIDE C. SMART D. DREAD

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Which of the following elements in web.xml file ensures that cookies will be transmitted over an encrypted channel?

A. < connector lsSSLEnabled="Yes" / > B. < connector SSLEnabled="true" / > C. < connector SSLEnabled="false" / > D. < connector EnableSSL="true" / >

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
In which phase of secure development lifecycle the threat modeling is performed?

A. Deployment phase B. Testing phase C. Coding phase D. Design phase

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

ECCouncil Certified Application Security Engineer (CASE) JAVA - 312-96 Exam Questions