GIAC GSSP-Java - GIAC Secure Software Programmer – Java

Mark works as a Programmer for InfoTech Inc. He develops a RefreshFailed.jsp page for a servlet. He wants that the RefreshFailed.jsp page will be displayed when the

javax.security.auth.RefreshFailedException is thrown. Which of the following error-page deployment descriptor element declarations will be used?

Mark works as a Programmer for InfoTech Inc. He develops the following code snippet. class Auto

{public static void main(String args[])

{Character iob ='d';float i=iob;System.out.println(iob);}}

What will be the result when Mark tries to execute the code snippet?

Mark works as a Programmer for InfoTech Inc. He develops the following code for a Web application named JavaSecurity Application.

A JavaSecurity Application

...

Manager

Admin

Programmer

Admin

Employee

Which of the following will be the action of the container if the request is HttpServletRequest, and request.isUserInRole("Admin"); has been called in a servlet code?

Roger works as a Software Developer for Tech Mart Inc. He creates an application using Enterprise JavaBeans. In the bean class, he writes a code snippet as follows.

Boolean b = ctx.isCallerInRole("Administrator");

The Application Assembler named Bob declares the following entries within the element of the deployment descriptor.

1.

2. The HR-Manager will have permission to access all the methods.

3. HR-Manager

4.

5.

Bob wants to ensure that the HR-Manager declared in the deployment descriptor has all the privileges of an administrator. Which of the following elements should Bob declare in line 4 while deploying the bean?

Which of the following validates an HTML form at client-side before submitting it to the server?

You work as a developer for PassGuide Inc. You have implemented a session bean with a method doPrint(), which behaves differently depending on the caller's security role. Only MANAGER in the security roles "ADMIN" and "MANAGER" are allowed to call the method. Which of the following actions are appropriate to accomplish if there is no security-related metadata in the deployment descriptor?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements about serialization are true?

Each correct answer represents a complete solution. Choose all that apply.

Mark works as a Programmer for InfoTech Inc. He develops the following code snippet.

1. public class Garbage

2. {

3. public static void main(String args[])

4. {

5. String line;

6. String first="it is a program";

7. String last="last argument";

8. String arg1=new String((args.length>0) ? "'" + args[0] + "'" . "no arguments");

9. line=arg1;

10. arg1=null;

11. line=first + line + last;

12. first=null;

13. System.out.println("line");

14. line=null;

15. last=null;

16. args=null;

17. }

18. }

Which of the following statements about the code snippet is true when an object is initially referenced with arg1, and it is eligible for garbage collection?

Which of the following statements about the element are true?

Each correct answer represents a complete solution. Choose all that apply.

There are two threads defined in an application named "thread1" and "thread2". Which of the following options can be the direct cause of "thread1" becoming blocked?

Each correct answer represents a complete solution. Choose all that apply.