Tag: security

Questions Related to security

Which methods in the TCS SAPI can be used to prevent Cross Site Scripting Attacks?
technology security

  1. isSafeHTML(java.lang.String context, java.lang.String input, boolean allowNull) and encodeForHTML(java.lang.String input)

  2. isSafeHTML(java.lang.String context, java.lang.String input)

  3. SafeHTML(java.lang.String context, java.lang.String input)

  4. ValidHTML(java.lang.String context, java.lang.String input)

Show answer
Correct Option: A

What is the base class for all Security related exceptions in the security API?

technology security

  1. SecurityException

  2. EnterpriseException

  3. EnterpriseSecurityException

  4. None of the above

Show answer
Correct Option: C

What is used as the salt value in the hash function available in the TCS SAPI?
technology security

  1. A constant value stored as plain text within a configuration file

  2. There is no salt added while calculating the hash value

  3. The accountName is used as the salt value

  4. The salt value is calculated from the password value

Show answer
Correct Option: C

What is meant by Canonicalization?
technology security

  1. Its a form of encoding

  2. Its a form of encryption

  3. Its a form of decryption

  4. Its simply the operation of reducing a possibly encoded string down to its simplest form

Show answer
Correct Option: D

What is the functionality of the sign() method?
technology security

  1. Encrypts the input and returns the encrypted string

  2. Encodes the data

  3. Hashes the data

  4. Create a digital signature for the provided input data and return the signature in a string

Show answer
Correct Option: D

Which methods in the TCS SAPI can be used to prevent Path Traversal?
technology security

  1. isValidDirectory( java.lang.String context, java.lang.String input)

  2. isValidDirectory( java.lang.String context, java.lang.String input) and isValidFileName(java.lang.String context, java.lang.String input)

  3. isSafeDirectoryPath(java.lang.String context, java.lang.String input,boolean allowNull) and isSafeFileName(java.lang.String context, java.lang.String input,boolean allowNull)

  4. ValidateDirectoryPath(java.lang.String context, java.lang.String input,boolean allowNull)

Show answer
Correct Option: C

What is the method signature for hashing password?

technology security

  1. String hashPassword(String password)

  2. String hashPassword(String password, String accountName)

  3. String hashpassword(String password)

  4. None of the above

Show answer
Correct Option: B

What is the return type of the verifyPasswordStrength() method in the security API?
technology security

  1. Boolean

  2. String

  3. Integer

  4. void

Show answer
Correct Option: D

What is the return type of the isAuthorizedForData() method in the security API?
technology security

  1. String

  2. boolean

  3. Integer

  4. void

Show answer
Correct Option: B

What is the return type of the getCSRFToken() method?
technology security

  1. Integer

  2. Byte

  3. String

  4. BigInteger

Show answer
Correct Option: C