ECCouncil 312-96 : Certified Application Security Engineer (CASE) JAVA

ECCouncil Certified Application Security Engineer (CASE) JAVA은 출제 범위가 넓고 난도가 높아 혼자 준비하기 쉽지 않은 시험입니다. ITDumpsKR의 312-96 모의고사는 2026년 최신 출제 경향을 반영해 구성되었습니다. 검증된 자료로 효율적으로 대비하시기 바랍니다.

ECCouncil 312-96 시험 개요:

ECCouncil 312-96 시험 요강 주제:

ECCouncil 312-96 응시 전 알아두어야 할 질문들

최신 Application Security 312-96 무료샘플문제

문제 #1

Thomas is not skilled in secure coding. He neither underwent secure coding training nor is aware of the consequences of insecure coding. One day, he wrote code as shown in the following screenshot. He passed
'false' parameter to setHttpOnly() method that may result in the existence of a certain type of vulnerability.
Identify the attack that could exploit the vulnerability in the above case.

A. Denial-of-Service attack
B. Directory Traversal Attack
C. SQL Injection Attack
D. Client-Side Scripts Attack

문제 #2

Identify the type of attack depicted in the following figure.

A. SQL Injection Attacks
B. Session Fixation Attack
C. Parameter Tampering Attack
D. Denial-of-Service Attack

문제 #3

Alice works as a Java developer in Fygo software Services Ltd. He is given the responsibility to design a bookstore website for one of their clients. This website is supposed to store articles in .pdf format. Alice is advised by his superior to design ArticlesList.jsp page in such a way that it should display a list of all the articles in one page and should send a selected filename as a query string to redirect users to articledetails.jsp page.
Alice wrote the following code on page load to read the file name.
String myfilename = request.getParameter("filename");
String txtFileNameVariable = myfilename;
String locationVariable = request.getServletContext().getRealPath("/"); String PathVariable = ""; PathVariable = locationVariable + txtFileNameVariable; BufferedInputStream bufferedInputStream = null; Path filepath = Paths.get(PathVariable); After reviewing this code, his superior pointed out the security mistake in the code and instructed him not repeat the same in future. Can you point the type of vulnerability that may exist in the above code?

A. XSS vulnerability
B. Form Tampering vulnerability
C. Directory Traversal vulnerability
D. URL Tampering vulnerability

문제 #4

Identify the type of attack depicted in the figure below:

A. Denial-of-Service attack
B. Cross-Site Request Forgery (CSRF) attack
C. SQL injection attack
D. XSS

문제 #5

Ted is an application security engineer who ensures application security activities are being followed during the entire lifecycle of the project. One day, he was analyzing various interactions of users depicted in the use cases of the project under inception. Based on the use case in hand, he started depicting the scenarios where attacker could misuse the application. Can you identify the activity on which Ted is working?

A. Ted was depicting abuse cases
B. Ted was depicting abstract use cases
C. Ted was depicting lower-level use cases
D. Ted was depicting security use cases

질문과 대답: