312-96: Certified Application Security Engineer (Java)Demo

By ECCouncil · Question Mode

QuestionQ23

Secure Deployment and Maintenance

Oliver, a Server Administrator (Tomcat), has configured the web.xml file as shown in the following screenshot. What is he attempting to achieve?

Question Image

  • A He wants to transfer the entire data over encrypted channel
  • B He wants to transfer only response parameter data over encrypted channel
  • C He wants to transfer only request parameter data over encrypted channel
  • D He wants to transfer only Session cookies over encrypted channel
Explanation

A user-data-constraint with transport-guarantee set to CONFIDENTIAL requires the constrained HTTP traffic to use a confidential, protected transport connection, typically HTTPS/TLS. It protects the complete request and response exchange for the URLs and methods covered by the security constraint, rather than protecting only parameters or session cookies.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!