Question 1

Identify the type of attack depicted in the figure below:

Options :

A : XSS

B : Cross-Site Request Forgery (CSRF) attack

C : SQL injection attack

D : Denial-of-Service attack

Answer: B

Question 2

According to secure logging practices, programmers should ensure that logging processes are not disrupted by

Options :

A : Catching incorrect exceptions

B : Multiple catching of incorrect exceptions

C : Re-throwing incorrect exceptions

D : Throwing incorrect exceptions

Answer: D

Question 3

Oliver is a web server admin and wants to configure the Tomcat server in such a way that it should not serve index pages in the absence of welcome files. Which of the following settings in CATALINA_HOME/conf/ in web.xml will solve his problem?

Options :

A : < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < / param-name > < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > false < /param-value > < /init-param > < load-on-startup > 1 < /load-onstartup > < servlet >

B : < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < / param-name > < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > disable < /param-value> < /init-param > < load-on-startup > 1 < /load-onstartup> < /servlet >

C : < servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < / param-name>< param-value> 0 < /param value>< /init-param > < init-param > < param-name> listings < / param-name > < param-value > enable < /param-value > < /init-param > < load-on-startup> 1 < /load-onstartup > < /servlet >

D : < servlet > < servlet-name > default < servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < / param-name> < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > true < /param-value > < /init-param > < load-on-startup > l < /load-onstartup > < /servlet >

Answer: B

Question 4

Which of the following configuration settings in server.xml will allow Tomcat server administrator to impose limit on uploading file based on their size?

Options :

A : < connector... maxFileLimit="file size" / >

B : < connector... maxPostSize="0" / >

C : < connector... maxFileSize="file size" / >

D : < connector... maxPostSize="file size" / >

Answer: D

Question 5

Which of the following state management method works only for a sequence of dynamically generated forms?

Options :

A : Cookies

B : Sessions

C : Hidden Field

D : URL-rewriting

Answer: C