GSSP-Java GIAC Secure Software Programmer - Java Questions and Answers

Consider the given lines of codE.

package ucert

class memberaccess

{

public int mem = 10;

}

Which of the following can directly access the variable mem?

Which of the following data type values is returned by the System.in.read() console input function?

Which of the following JDBC interfaces is described in the statement below?

"It provides support for executing SQL statements and stored procedures."

You work as a Software Developer for UcTech Inc. You want to declare a security constraint in the deployment descriptor using the element. Which of the following can be the possible values for the element?

Each correct answer represents a complete solution. Choose all that apply.

You work as a Software Developer for UcTech Inc. You build an online book shop, so that users can purchase books using their credit cards. You want to ensure that only the administrator can access the credit card information sent by users. Which security mechanism will you use to accomplish the task?

Which of the following classes is an engine class that provides an opaque representation of cryptographic parameters?

Which of the following elements of the java.util.logging package exports objects to a variety of destinations including memory, output streams, consoles, files, and sockets?

Which of the following is a mandatory sub-element of the element of the deployment descriptor?

You work as a Software Developer for Relix Inc. You have written the following code. class Test {protected void show(){}}

Now you want to override the method show() in the subclass of Test. Which of the following access

specifiers can you use to override this method?

Each correct answer represents a complete solution. Choose two.

Which of the following code fragments will throw NumberFormatException?

John works as a Programmer for Technostar Inc. He writes the following code using Java.

1. class WrapperClass{

2. public static void main(String[] argv){

3. String str2 = Double.toString(12);

4. String str1 = Double.toHexString(12);

5. System.out.println(str1+str2);

6. }

7. }

What will happen when John attempts to compile and execute the code?

Given below are top-level class declarations. Which of these class declarations would not produce a compile-time error?

abstract class P {} //1

private class Q {} //2

static class R {} //3

transient class S {} //4

Which of the following statements about a native modifier in Java are true?

Each correct answer represents a complete solution. Choose two.

You work as a Software Developer for NewTech Inc. You want to configure the deployment descriptor so as to specify the error pages used in the FORM based authentication. Which of the following elements will you use to accomplish the task?

Which of the following methods returns a Cipher object that implements the specified transformation?

Mark works as a Programmer for InfoTech Inc. He develops the following code snippet.

1. public class Header

2. {

3. //code//

4. {

5. System.out.println("Print the code.");

6. super.finalize();

7. }

8. }

Which of the following header statements should be placed at line 3 to execute the program

successfully?

Mark works as a Programmer for InfoTech Inc. He develops a Website that uses HTML and processes HTML validation. Which of the following are the advantages of the HTML application?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following methods are used in the verification of a signature?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements make a message-driven bean different from a session bean?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following methods is used to preallocate room for a certain number of characters after a StringBuffer has been constructed?

Which of the following methods of the java.util.logging package logs a message, specifying source class and method, with associated Throwable information?

You work as an Application Deployer for UcTech Inc. You want to configure a filter for a Web application using the deployment descriptor. Which of the following attributes are mandatory for you to implement in order to accomplish the task?

Each correct answer represents a complete solution. Choose all that apply.

Mark works as a Programmer for InfoTech Inc. He develops the following code snippet.

package Mark.tutorial.javaee.ejb;

import java.util.logging.Logger;

import javax.annotation.Resource;

import javax.ejb.Stateless;

import javax.ejb.Timeout;

import javax.ejb.Timer;

import javax.ejb.TimerService;

@Stateless

public class TimerBean implements TimerSessionBean {

@Resource

TimerService timerService;

private static final Logger logger = Logger.getLogger

("com.sun.tutorial.javaee.ejb.timersession.TimerSessionBean");

public void createTimer(long intervalDuration) {

Timer timer = timerService.createTimer(intervalDuration, "New timer created");

}

@Timeout

public void timeout(Timer timer) {

logger.info("Timer Timeout");

}

}

which of the following statements are true about the code?

Each correct answer represents a complete solution. Choose all that apply.

You work as a Software Developer for UcTech Inc. You want the deployment descriptor to contain entries for the authentication type and the security realm. In order to accomplish this, you have to use the sub-elements of the element. Which of the following will you use?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements about the form-based authentication are true?

Each correct answer represents a complete solution. Choose two.

Mark works as a Programmer for InfoTech Inc. He develops the following code snippet.

import java.util.*;

public class DemoSet{

public static void main(String[] args){

TreeSet ts = new TreeSet();

ts.add("Sunday");

ts.add("Friday");

ts.add("Wednesday");

ts.add("Sunday");

ts.add("Monday");

Iterator it = ts.iterator();

while(it.hasNext()){

System.out.print(it.next() + " ");

}

}

}

What will be the output when he tries to execute the given code snippet?

Which of the following permission classes is an abstract class ancestor of all permissions and defines the essential functionalities required for all permissions?

Which of the following statements about the isUserInRole() method are true?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following classes implements the java.lang.Cloneable and java.lang.Runnable interfaces correctly?

Which of the following methods of the javax.ejb.EJBContext interface allows the bean provider to access security information about the enterprise bean's caller?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following init() method calls initializes a cipher object with a key in the SECRET_MODE?

Identify whether the given statement is true or false.

"If the isUserInRole() method is called on an unauthenticated user, the container returns false."

You work as a Software Developer for NewTech Inc. You write a bean class using Enterprise JavaBeans 3.0. The class uses the @DeclareRoles ("ADMIN, HR, DBA, USER") annotation to declare the security roles. The class contains a method named showResult(). You want to ensure that the ADMIN role is granted privilege to the showResult() method. Moreover, if a role that is not allowed to access the method tries to call the method, an error message must be shown. Assuming that there is no security-related element in the deployment descriptor, which of the following will you use to accomplish the task?

Each correct answer represents a part of the solution. Choose two.

Which of the following elements indicates which users in specified roles are permitted access to a resource collection?

Which of the following statements are true?

Each correct answer represents a complete solution. Choose all that apply.

Identify whether the given statement is true or false.

"An object becomes eligible for garbage collection when it becomes unreachable by any code."

Which of the following JAR file options is used for creating an archive?

Which of the following classes of java.util.logging prints a brief summary of the LogRecord in a human readable format?