Download ECCouncil.312-96.VCEplus.2023-08-21.20q.tqb
| Vendor: | ECCouncil |
| Exam Code: | 312-96 |
| Exam Name: | Certified Application Security Engineer (CASE) JAVA |
| Date: | Aug 21, 2023 |
| File Size: | 646 KB |
| Downloads: | 1 |
Demo Questions
Question 1
Alice, a security engineer, was performing security testing on the application. He found that users can view the website structure and file names. As per the standard security practices, this can pose a serious security risk as attackers can access hidden script files in your directory. Which of the following will mitigate the above security risk?
- < int-param > < param-name>directory-listinqs < param-value>true < /init-param >
- < int param > < param-name>directorv-listinqs < param-value>false < /init-param >
- < int-param > < param-name>listinqs < param-value>true < /init-param
- < int-param > < param-name>listinqs < param-value>false < /init-param >
Correct answer: B
Question 2
Which of the following relationship is used to describe security use case scenario?
- Threatens Relationship
- Extend Relationship
- Mitigates Relationship
- Include Relationship
Correct answer: B
Question 3
Identify the formula for calculating the risk during threat modeling.
- RISK = PROBABILITY 'Attack
- RISK = PROBABILITY ' ASSETS
- RISK = PROBABILITY * DAMAGE POTENTIAL
- IRISK = PROBABILITY * VULNERABILITY
Correct answer: C
