ECCouncil Certified Application Security Engineer (CASE) JAVA 認定 312-96 試験問題:

1. A developer to handle global exception should use _________ annotation along with @ExceptionHandler method annotation for any class

A) @GlobalAdvice
B) @Advice
C) @ControllerAdvice
D) @globalControllerAdvice

2. Which of the following method will you use in place of ex.printStackTrace() method to avoid printing stack trace on error?

A) ex.getError();
B) ex.message();
C) ex.getMessage();
D) ex.StackTrace.getError();

3. According to secure logging practices, programmers should ensure that logging processes are not disrupted by:

A) Re-throwing incorrect exceptions
B) Catching incorrect exceptions
C) Multiple catching of incorrect exceptions
D) Throwing incorrect exceptions

4. Which of the following can be derived from abuse cases to elicit security requirements for software system?

A) Security use cases
B) Data flow diagram
C) Use cases
D) Misuse cases

5. Suppose there is a productList.jsp page, which displays the list of products from the database for the requested product category. The product category comes as a request parameter value. Which of the following line of code will you use to strictly validate request parameter value before processing it for execution?

A) public boolean validateUserName() { Pattern p = Pattern.compile("[a-zA-Z0-9]*$"); Matcher m = p.matcher(request.getParameter(CatId")); boolean result = m.matches(); return result;}
B) public boolean validateUserName() { if(request.getParameter("CatId")!=null ) String CategoryId=request.getParameter("CatId");}
C) public.boolean validateUserName() { if(!request.getParamcter("CatId").equals("null"))}
D) public boolean validateUserName() {String CategoryId= request.getParameter("CatId");}

質問と回答：