312-96無料問題集「ECCouncil Certified Application Security Engineer (CASE) JAVA」

質問 1

According to secure logging practices, programmers should ensure that logging processes are not disrupted by:

（A）Catching incorrect exceptions

（B）Re-throwing incorrect exceptions

（C）Multiple catching of incorrect exceptions

（D）Throwing incorrect exceptions

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Ted is an application security engineer who ensures application security activities are being followed during the entire lifecycle of the project. One day, he was analyzing various interactions of users depicted in the use cases of the project under inception. Based on the use case in hand, he started depicting the scenarios where attacker could misuse the application. Can you identify the activity on which Ted is working?

（A）Ted was depicting lower-level use cases

（B）Ted was depicting abuse cases

（C）Ted was depicting security use cases

（D）Ted was depicting abstract use cases

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which of the following configurations can help you avoid displaying server names in server response header?

（A）< Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort= "8443" / >

（B）< Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" ServerName ="null " redirectPort="8443'' / >

（C）< Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" Server = " " redirectPort="8443" / >

（D）< Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" ServerName=" disable" redirectPort="8443" / >

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Identify the formula for calculating the risk during threat modeling.

（A）RISK = PROBABILITY "Attack

（B）IRISK = PROBABILITY * VULNERABILITY

（C）RISK = PROBABILITY " ASSETS

（D）RISK = PROBABILITY * DAMAGE POTENTIAL

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which of the threat classification model is used to classify threats during threat modeling process?

（A）STRIDE

（B）SMART

（C）DREAD

（D）RED

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

312-96 無料問題集「ECCouncil Certified Application Security Engineer (CASE) JAVA」

弊社を連絡する

関連リンク

トップ試験