Logo ExamsQA
Exit
Official Bank 0/47

Eccouncil Certified Application Security Engineer (CASE) JAVA (312-96) - EC-Council Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
47 Total Questions
1
Question
Which of the following configurations can help you avoid displaying server names in server response header?
Options
A < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort= "8443" / >
B < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" ServerName=" disable" redirectPort="8443" / >
C < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" ServerName ="null "
redirectPort="8443'' / >
D < Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" Server = " "
redirectPort="8443" / >
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Alice, a security engineer, was performing security testing on the application. He found that users can view the website structure and file names. As per the standard security practices, this can pose a serious security risk as attackers can access hidden script files in your directory. Which of the following will mitigate the above security risk?
Options
A < int-param > < param-name>directory-listinqs < param-value>true < /init-param >
B < int param > < param-name>directorv-listinqs < param-value>false < /init-param >
C < int-param > < param-name>listinqs < param-value>true < /init-param
D < int-param > < param-name>listinqs < param-value>false < /init-param >
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Identify the type of attack depicted in the figure below:

Exhibit
Options
A Cross-Site Request Forgery (CSRF) attack
B XSS
C SQL injection attack
D Denial-of-Service attack
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
A developer to handle global exception should use @ExceptionHandler method annotation for any class _________
Options
A @ControllerAdvice
B @Advice
C @globalControllerAdvice
D @GlobalAdvice annotation along with
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Suppose there is a productList.jsp page, which displays the list of products from the database for the requested product category. The product category comes as a request parameter value. Which of the following line of code will you use to strictly validate request parameter value before processing it for execution?
Options
A public boolean validateUserName() {String CategoryId= request.getParameter("CatId");}
B public boolean validateUserName() { Pattern p = Pattern.compile("[a-zA-Z0-9]*$"); Matcher m =
p.matcher(request.getParameter(CatId")); boolean result = m.matches(); return result;}
C public.boolean validateUserName() { if(!request.getParamcter("CatId").equals("null"))}
D public boolean validateUserName() { if(request.getParameter("CatId")!=null ) String
CategoryId=request.getParameter("CatId");}
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.