Logo ExamsQA
Exit
Official Bank 0/47

Eccouncil Certified Application Security Engineer (CASE) JAVA (312-96) - EC-Council Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
47 Total Questions
1
Question
Which of the following relationship is used to describe abuse case scenarios?
Options
A Include Relationship
B Threatens Relationship
C Extend Relationship
D Mitigates Relationship
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Alice, a Server Administrator (Tomcat), wants to ensure that Tomcat can be shut down only by the user who owns the Tomcat process. Select the appropriate setting of the CATALINA_HOME/conf in server.xml that will enable him to do so.
Options
A < server port="-1" shutdown-
*" >
B < server port="" shutdown- "' >
C < server port="8080" shutdown="SHUTDOWN" >
D < server port="-1" shutdown="SHUTDOWN" >
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Stephen is a web developer in the InterCall Systems. He was working on a Real Estate website for one of his clients. He was given a task to design a web page with properties search feature. He designed the following searchpage.jsp < form Id="form1" method="post" action="SearchProperty.jsp" > < input type="text" id=''txt_Search" name="txt_Search" placeholder="Search Property..." / > < input type="Submit" Id="Btn_Search" value="Search" / > < /form > However, when the application went to security testing phase, the security tester found an XSS vulnerability on this page. How can he mitigate the XSS vulnerability on this page?
Options
A He should write code like out-Write ("You Searched for:"
+ESAPI.encoder().encodeForHTML(search));
B He should write code like out.write ("You Searched for:" +
request.qetParameter("search"l.toStrinq(ll;
C He should write code like out.write (("You Searched for:" +(search));
D He should write code like out.write ("You Searched for:" + request.qetParameterf'txt Search"));
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Alice, a security engineer, was performing security testing on the application. He found that users can view the website structure and file names. As per the standard security practices, this can pose a serious security risk as attackers can access hidden script files in your directory. Which of the following will mitigate the above security risk?
Options
A < int-param > < param-name>directory-listinqs < param-value>true < /init-param >
B < int param > < param-name>directorv-listinqs < param-value>false < /init-param >
C < int-param > < param-name>listinqs < param-value>true < /init-param
D < int-param > < param-name>listinqs < param-value>false < /init-param >
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Which of the following method will you use in place of ex.printStackTrace() method to avoid printing stack trace on error?
Options
A ex.StackTrace.getError();
B ex.message();
C ex.getMessage();
D ex.getError();
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.