GIAC GIAC Information Security GSSP-JAVA Questions & Answers

• Question 11:

  Which of the following exceptions will be thrown by the getFeature() method if the feature value cannot be assigned or retrieved?

  A. SAXNotSupportedException

  B. SAXNotRecognizedException

  C. NullPointerException

  D. IllegalArgumentException

  Correct Answer: B

• Question 12:

  Which of the following methods belongs to the Refreshable interface?

  A. commit

  B. destroy

  C. isReadOnly

  D. isCurrent

  Correct Answer: D

• Question 13:

  Which of the following exceptions is thrown to indicate that a servlet is temporarily unavailable?

  A. ServletException

  B. ApplicationException

  C. IllegalStateException

  D. IOException

  E. UnavailableException

  F. IllegalAccessException

  Correct Answer: E

• Question 14:

  Which of the following is the return type of the getInitParameter() method of the ServletContext interface?

  A. Enumeration

  B. String

  C. String array

  D. ServletContext

  E. Integer

  Correct Answer: B

• Question 15:

  Which of the following tags is used to include resources from within the same servlet container?

  A.

  B.

  C.

  D.

  Correct Answer: B

• Question 16:

  Which of the following attributes of the action is used to indicate whether to force the output buffer used by the JspWriter to be written to the client before the resource is included?

  A. value

  B. flush

  C. name

  D. page

  Correct Answer: B

• Question 17:

  Which of the following exceptions will be thrown if the checkSecurityAccess() method uses an empty target as its parameter value?

  A. NullPointerException

  B. SecurityException

  C. NoArgumentException

  D. IllegalArgumentException

  Correct Answer: D

• Question 18:

  Which of the following methods of the HttpServletResponse interface is used for URL rewriting? Each correct answer represents a complete solution. Choose all that apply.

  A. encodeURL

  B. encodeRedirectURL

  C. sendRedirect

  D. getRequestURL()

  Correct Answer: AB

• Question 19:

  You work as a Software Developer for NewTech Inc. You write a bean class using Enterprise JavaBeans

  3.0. The class uses the @DeclareRoles ("ADMIN, HR, DBA, USER") annotation to declare the security roles. The class contains a method named showResult(). You want to ensure that the ADMIN role is granted privilege to the showResult() method. Moreover, if a role that is not allowed to access the method tries to call the method, an error message must be shown. Assuming that there is no security-related element in the deployment descriptor, which of the following will you use to accomplish the task? Each correct answer represents a part of the solution. Choose two.

  A. The isCallerInRole() method

  B. The getCallerPrincipal() method

  C. The @RolesAllowed("ADMIN") annotation

  D. The @PermitAll annotation

  Correct Answer: AC

• Question 20:

  Which of the following statements about the String, StringBuffer, and StringBuilder classes are true? Each correct answer represents a complete solution. Choose all that apply.

  A. The StringBuffer class offers faster performance than the StringBuilder class.

  B. The StringBuffer class is thread-safe while the StringBuilder class is not.

  C. A character in a string can be searched using the indexOf() operator.

  D. The return type of the trim() method present in the String class is void.

  Correct Answer: BC