GIAC GIAC Information Security GSSP-JAVA Questions & Answers

• Question 221:

  You work as a Software Developer for UcTech Inc. You want to declare a security constraint in the

  deployment descriptor using the element. Which of the following can be the

  possible values for the element?

  Each correct answer represents a complete solution. Choose all that apply.

  A. CONFIDENTIAL

  B. ALL

  C. NONE

  D. INTEGRAL

  Correct Answer: ACD

• Question 222:

  Which of the following methods must be implemented by each subclass of the Permission class to compare permissions?

  A. hashcode

  B. implies

  C. newPermissionCollection

  D. equals

  Correct Answer: B

• Question 223:

  You work as a Software Developer for UcTech Inc. You want to write a filter that will implement the Filter interface. Which of the following methods will you use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.

  A. doPostFilter()

  B. doGetFilter()

  C. doFilter()

  D. init()

  E. service()

  Correct Answer: CD

• Question 224:

  Which of the following is used to restore the objects that have been previously serialized by a stream?

  A. FileInputStream

  B. ObjectOutputStream

  C. ObjectInputStream

  D. FileOutputStream

  Correct Answer: C

• Question 225:

  You work as a Software Developer for UcTech Inc. You build an online book shop, so that users can purchase books using their credit cards. You want to ensure that only the administrator can access the credit card information sent by users. Which security mechanism will you use to accomplish the task?

  A. Confidentiality

  B. Authorization

  C. Authentication

  D. Data integrity

  Correct Answer: A

• Question 226:

  You work as a Programmer for InfoTech Inc and develop the following two

  declarations.

  Manager

  /acme/Manager/*

  GET

  POST

  Manager

  /acme/Manager/*

  GET POST Manager

  Which of the following statements is true about the in the code given above?

  A. Nobody is allowed to access the specified resources.

  B. Only Manager is allowed to access the specified resources.

  C. The first element declaration is incorrect.

  D. It is not possible to define the multiple security constraint on a single resource.

  Correct Answer: A

• Question 227:

  Mark works as a Programmer for InfoTech Inc. He develops a Java application that uses the encryption and compression techniques. Which of the following interfaces will he use to control the serialization and deserialization processes?

  A. Flushable

  B. Closeable

  C. Serializable

  D. Externalizable

  Correct Answer: D

• Question 228:

  Which of the following methods is used to encrypt or decrypt data in a single step?

  A. wrap()

  B. update()

  C. digest()

  D. doFinal()

  Correct Answer: D

• Question 229:

  Which of the following methods belongs to the FilterConfig interface and ServletConfig interface both? Each correct answer represents a complete solution. Choose all that apply.

  A. getInitParameter()

  B. getServletContext()

  C. getFilterName()

  D. getInitParameterNames()

  Correct Answer: ABD

• Question 230:

  You work as a Software Developer for UcTech Inc. You want to use form-based authentication as a

  security mechanism in your application. Which of the following entries will you use in your login page to

  accomplish the task?

  Each correct answer represents a part of the solution. Choose all that apply.

  A. j_pw

  B. j_security_check

  C. password

  D. _jid

  E. j_username

  F. j_password

  G. jid

  H. j_un

  Correct Answer: BEF