Free 312-96 Exam Braindumps
Certified Application Security Engineer (CASE) JAVA Questions 16–20 (page: 5)

Updated On: 10-Feb-2026

Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?

  1. DREAD
  2. SMART
  3. STRIDE
  4. RED

Answer(s): C



Which of the following Spring Security Framework configuration setting will ensure the protection from session fixation attacks by not allowing authenticated user to login again?

  1. session-fixation-protection ="newSessionlD"
  2. session-fixation-protection =".
  3. session-fixation-protection ="enabled"
  4. session-fixation-protection =".

Answer(s): B



Alice, a security engineer, was performing security testing on the application. He found that users can view the website structure and file names. As per the standard security practices, this can pose a serious security risk as attackers can access hidden script files in your directory.
Which of the following will mitigate the above security risk?

  1. < int-param > < param-name>directory-listinqs < param-value>true < /init-param >
  2. < int param > < param-name>directorv-listinqs < param-value>false < /init-param >
  3. < int-param > < param-name>listinqs < param-value>true < /init-param
  4. < int-param > < param-name>listinqs < param-value>false < /init-param >

Answer(s): B



Which of the following relationship is used to describe security use case scenario?

  1. Threatens Relationship
  2. Extend Relationship
  3. Mitigates Relationship
  4. Include Relationship

Answer(s): B



Identify the formula for calculating the risk during threat modeling.

  1. RISK = PROBABILITY "Attack
  2. RISK = PROBABILITY " ASSETS
  3. RISK = PROBABILITY * DAMAGE POTENTIAL
  4. IRISK = PROBABILITY * VULNERABILITY

Answer(s): C



Viewing page 5 of 11
Viewing questions 21 - 25 out of 49 questions


Post your Comments and Discuss EC-Council 312-96 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!