Tag: security

Questions Related to security

Which methods in the TCS SAPI can be used to prevent Cross Site Scripting Attacks?
technology security

  1. isSafeHTML(java.lang.String context, java.lang.String input, boolean allowNull) and encodeForHTML(java.lang.String input)

  2. isSafeHTML(java.lang.String context, java.lang.String input)

  3. SafeHTML(java.lang.String context, java.lang.String input)

  4. ValidHTML(java.lang.String context, java.lang.String input)

Show answer
Correct Option: A

What is the base class for all Security related exceptions in the security API?
technology security

  1. SecurityException

  2. EnterpriseException

  3. EnterpriseSecurityException

  4. None of the above

Show answer
Correct Option: C

What is used as the salt value in the hash function available in the TCS SAPI?
technology security

  1. A constant value stored as plain text within a configuration file

  2. There is no salt added while calculating the hash value

  3. The accountName is used as the salt value

  4. The salt value is calculated from the password value

Show answer
Correct Option: C

What is meant by Canonicalization?
technology security

  1. Its a form of encoding

  2. Its a form of encryption

  3. Its a form of decryption

  4. Its simply the operation of reducing a possibly encoded string down to its simplest form

Show answer
Correct Option: D

What is the functionality of the sign() method?
technology security

  1. Encrypts the input and returns the encrypted string

  2. Encodes the data

  3. Hashes the data

  4. Create a digital signature for the provided input data and return the signature in a string

Show answer
Correct Option: D

Which methods in the TCS SAPI can be used to prevent Path Traversal?
technology security

  1. isValidDirectory( java.lang.String context, java.lang.String input)

  2. isValidDirectory( java.lang.String context, java.lang.String input) and isValidFileName(java.lang.String context, java.lang.String input)

  3. isSafeDirectoryPath(java.lang.String context, java.lang.String input,boolean allowNull) and isSafeFileName(java.lang.String context, java.lang.String input,boolean allowNull)

  4. ValidateDirectoryPath(java.lang.String context, java.lang.String input,boolean allowNull)

Show answer
Correct Option: C

The ASAP process can applied at which phase of an application development for best results?
technology security

  1. During testing

  2. During development

  3. During all phases of development starting with requirement analysis and ending with rollout

  4. During design

Show answer
Correct Option: C

In the ASAP process what is the main activity carried out in the requirement analysis phase?
technology security

  1. Capture the customer requirements

  2. Update the project plan

  3. Capture and update the URS and SRS with security requirements for the project

  4. None of the above

Show answer
Correct Option: C

Who has the responsibility for remediation of the security vulnerabilities discovered during application security testing?

technology security

  1. ASAP Team

  2. Development Team

  3. Testing Team

  4. Project Management

Show answer
Correct Option: B

What are the different types of engagement models available for ASAP?
technology security

  1. Time and Money, Fixed price

  2. Offshore, Onshore, Offshore-Onshore

  3. Full-Fledged, Staggered, Fast Track

  4. None of the above

Show answer
Correct Option: C