Identify the type of attack depicted in the figure below:

• A.Directory traversal attack
• B.Parameter/form attack
• C.SQL injection attack
• D.Session fixation attack

Comment: *

Name: *

Email: *

Verification: *

In which phase of secure development lifecycle the threat modeling is performed?

• A.Deployment phase
• B.Coding phase
• C.Testing phase
• D.Design phase

Comment: *

Name: *

Email: *

Verification: *

Which of the following can be derived from abuse cases to elicit security requirements for software system?

• A.Misuse cases
• B.Data flow diagram
• C.Use cases
• D.Security use cases

Comment: *

Name: *

Email: *

Verification: *

Which of the following elements in web.xml file ensures that cookies will be transmitted over an encrypted channel?

• A.< connector lsSSLEnabled="Yes" / >
• B.< connector EnableSSL="true" / >
• C.< connector SSLEnabled="false" / >
• D.< connector SSLEnabled="true" / >

Comment: *

Name: *

Email: *

Verification: *

Oliver is a web server admin and wants to configure the Tomcat server in such a way that it should not serve index pages in the absence of welcome files. Which of the following settings in CATALINA_HOME/conf/ in web.xml will solve his problem?

• A.< servlet > < servlet-name > default < servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name> < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > true < /param-value > < /init-param > < load-on-startup > l < /load-on-startup > < /servlet >
• B.< servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name > < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > false < /param-value > < /init-param > < load-on-startup > 1 < /load-on-startup > < servlet >
• C.< servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name > < param-value > 0 < /param-value > < /init-param > < init-param > < param-name > listings < /param-name > < param-value > disable < /param-value> < /init-param > < load-on-startup > 1 < /load-on-startup> < /servlet >
• D.< servlet > < servlet-name > default < /servlet-name > < servlet-class > org.apache.catalina.servlets.DefaultServlet < /servlet-class > < init-param > < param-name > debug < /param-name>< param-value> 0 < /param value>< /init-param > < init-param > < param-name> listings < /param-name > < param-value > enable < /param-value > < /init-param > < load-on-startup> 1 < /load-on-startup > < /servlet >

Comment: *

Name: *

Email: *

Verification: *