QUESTION: 29

After enable the content security policy in a magento site, you see below warnings/errors in the browser console. "[Report Only] Refused to load the script 'https://cdn.jquery.com/jquery.js' because it violates the following Content Security Policy directive: "script-src assets.adobedtm.com".What could be the standard fix of this problem?

Add etc/csp_whitelist.xml in a custom module and whitelist it under policy id="script-src"
Add etc/csp_whitelist.xml in a custom module and whitelist it under policy id="link-src"
Add etc/config.xml in a custom module and set report only to 1, to let the browser load all script urls without error.
Disable the module Magento_Csp to let the browser load all script urls without error.

Answer(s): A

Reveal Solution Next Question

QUESTION: 30

In a phtml, you added script tag and defined couple of js variables as below:Now to protect it from XSS attacks, which two methods allow you to keep the php variable output XSS-safe?Choose 2

$block->escapeUrl($myUrl)
$block->escapeJs($myName)
$block->escapeHtmlAttr($myName)
$block->escapeHtmlAttr($myUrl)

Answer(s): A,B

Reveal Solution Next Question

QUESTION: 31

Magento uses the HTTPOnly flag when setting cookies for security reasons. There is also a system configuration setting available in the Cookie Settings to turn it on and off.
What is the purpose of this flag?

To prevent cookies from being intercepted via a CSRF attack
To prevent cookies from being accessible via JavaScript
To prevent Cross Site Tracing (XST) attacks
To prevent cookies from being delivered over HTTPS

Answer(s): B

Reveal Solution Next Question

QUESTION: 32

You are integrating an external system from which products and categories will be synchronized with Magento.
To keep the category tree synchronized, an identifier attribute needs to be added to the catalog_category entity. The identifier value is generated by the external system as an unsigned 3 byte integer and is global in scope. Your code will run many concurrent queries to select categories based on this ID in order to synchronize changes.
Keeping performance in mind, what attribute backend type do you choose when creating the EAV attribute?

int
varchar
static
text

Answer(s): A

Reveal Solution Next Question

Free AD0-E704 Exam Braindumps (page: 9)

QUESTION: 29

QUESTION: 30

QUESTION: 31

QUESTION: 32

AD0-E704 Discussions & Posts