Oliver, a Server Administrator (Tomcat), has set configuration in web.xml file as shown in the following screenshot. What is he trying to achieve?

• A.He wants to transfer the entire data over encrypted channel
• B.He wants to transfer only response parameter data over encrypted channel
• C.He wants to transfer only request parameter data over encrypted channel
• D.He wants to transfer only Session cookies over encrypted channel

Comment: *

Name: *

Email: *

Verification: *

Sam, an application security engineer working in INFRA INC., was conducting a secure code review on an application developed in Java. He found that the developer has used a piece of code as shown in the following screenshot. Identify the security mistakes that the developer has coded?

• A.He is attempting to use client-side validation
• B.He is attempting to use whitelist input validation approach
• C.He is attempting to use regular expression for validation
• D.He is attempting to use blacklist input validation approach

Comment: *

Name: *

Email: *

Verification: *

A
US-based ecommerce company has developed their website www.ec-sell.com to sell their products online.
The website has a feature that allows their customer to search products based on the price. Recently, a bug bounty has discovered a security flaw in the Search page of the website, where he could see all products from the database table when he altered the website URL http://www.ec-sell.com/products.jsp?val=100 to
http://www.ec-sell.com/products.jsp?val=200 OR
'1'='1 -. The product.jsp page is vulnerable to

• A.Session Hijacking attack
• B.Cross Site Request Forgery attack
• C.SQL Injection attack
• D.Brute force attack

Comment: *

Name: *

Email: *

Verification: *