QUESTION: 9

In which phase of secure development lifecycle the threat modeling is performed?

Coding phase
Testing phase
Deployment phase
Design phase

Answer(s): D

Reveal Solution Next Question

QUESTION: 10

Identify the type of attack depicted in the figure below:

XSS
Cross-Site Request Forgery (CSRF) attack
SQL injection attack
Denial-of-Service attack

Answer(s): B

Reveal Solution Next Question

Stephen is a web developer in the InterCall Systems. He was working on a Real Estate website for one of his clients. He was given a task to design a web page with properties search feature. He designed the following searchpage.jsp

< form Id="form1" method="post" action="SearchProperty.jsp" >
< input type="text" id=''txt_Search" name="txt_Search" placeholder="Search Property..." / >
< input type="Submit" Id="Btn_Search" value="Search" / >
< /form >

However, when the application went to security testing phase, the security tester found an XSS vulnerability on this page. How can he mitigate the XSS vulnerability on this page?

He should write code like out-Write ("You Searched for:"+ESAPI.encoder().encodeForHTML(search));
He should write code like out.write ("You Searched for:" + request.qetParameter("search"l.toStrinq(ll;
He should write code like out.write ("You Searched for:" + request.qetParameterf'txt Search"));
He should write code like out.write (("You Searched for:" +(search));

Answer(s): A

Reveal Solution Next Question

QUESTION: 12

Jacob, a Security Engineer of the testing team, was inspecting the source code to find security vulnerabilities.
Which type of security assessment activity Jacob is currently performing?

ISCST
CAST
CAST
SAST

Answer(s): D

Reveal Solution Next Question

Free 312-96 Exam Braindumps (page: 4)

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

312-96 Discussions & Posts