Most Recent Eccouncil 312-96 Exam Questions & Answers

Prepare for the Eccouncil Certified Application Security Engineer (CASE) JAVA exam with our extensive collection of questions and answers. These practice Q&A are updated according to the latest syllabus, providing you with the tools needed to review and test your knowledge.

QA4Exam focus on the latest syllabus and exam objectives, our practice Q&A are designed to help you identify key topics and solidify your understanding. By focusing on the core curriculum, These Questions & Answers helps you cover all the essential topics, ensuring you're well-prepared for every section of the exam. Each question comes with a detailed explanation, offering valuable insights and helping you to learn from your mistakes. Whether you're looking to assess your progress or dive deeper into complex topics, our updated Q&A will provide the support you need to confidently approach the Eccouncil 312-96 exam and achieve success.

The questions for 312-96 were last updated on Nov 21, 2024.

Viewing page 1 out of 9 pages.
Viewing questions 1-5 out of 47 questions

Get All 47 Questions & Answers

Question No. 1

Which of the following configurations can help you avoid displaying server names in server response header?

A< Connector port='8080' protocol='HTTP/1.1' connectionTimeout='20000' redirectPort= '8443' / >

B< Connector port='8080' protocol='HTTP/1.1' connectionTimeout='20000' ServerName=' disable' redirectPort='8443' / >

C< Connector port='8080' protocol='HTTP/1.1' connectionTimeout='20000' Server = ' ' redirectPort='8443' / >

D< Connector port='8080' protocol='HTTP/1.1' connectionTimeout='20000' ServerName ='null ' redirectPort='8443'' / >

Show Answer

Correct Answer: B

Question No. 2

Alice, a security engineer, was performing security testing on the application. He found that users can view the website structure and file names. As per the standard security practices, this can pose a serious security risk as attackers can access hidden script files in your directory. Which of the following will mitigate the above security risk?

A< int-param > < param-name>directory-listinqs < param-value>true < /init-param >

B< int param > < param-name>directorv-listinqs < param-value>false < /init-param >

C< int-param > < param-name>listinqs < param-value>true < /init-param

D< int-param > < param-name>listinqs < param-value>false < /init-param >

Show Answer

Correct Answer: B

Question No. 3

Which line of the following example of Java Code can make application vulnerable to a session attack?

ALine No. 1

BLine No. 3

CLine No. 4

DLine No. 5

Show Answer

Correct Answer: B

Question No. 4

Stephen is a web developer in the InterCall Systems. He was working on a Real Estate website for one of his clients. He was given a task to design a web page with properties search feature. He designed the following searchpage.jsp

< form Id="form1" method="post" action="SearchProperty.jsp" >

< input type="text" id=''txt_Search" name="txt_Search" placeholder="Search Property..." / >

< input type="Submit" Id="Btn_Search" value="Search" / >

< /form >

However, when the application went to security testing phase, the security tester found an XSS vulnerability on this page. How can he mitigate the XSS vulnerability on this page?

AHe should write code like out-Write ('You Searched for:' +ESAPI.encoder().encodeForHTML(search));

BHe should write code like out.write ('You Searched for:' + request.qetParameter('search'l.toStrinq(ll;

CHe should write code like out.write ('You Searched for:' + request.qetParameterf'txt Search'));

DHe should write code like out.write (('You Searched for:' +(search));

Show Answer

Correct Answer: A

Question No. 5

Sam, an application security engineer working in INFRA INC., was conducting a secure code review on an application developed in Jav

a. He found that the developer has used a piece of code as shown in the following screenshot. Identify the security mistakes that the developer has coded?

AHe is attempting to use client-side validation

BHe is attempting to use whitelist input validation approach

CHe is attempting to use regular expression for validation

DHe is attempting to use blacklist input validation approach

Show Answer

Correct Answer: D

Unlock All Questions for Eccouncil 312-96 Exam

Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits

Get All 47 Questions & Answers