312-96: Certified Application Security Engineer (Java)Demo

By ECCouncil · Question Mode

QuestionQ44

Secure Deployment and Maintenance

Alice, a Server Administrator (Tomcat), wants to ensure that only the user who owns the Tomcat process can shut it down. Select the appropriate CATALINA_HOME/conf setting in server.xml that enables this.

  • A < server port="" shutdown="" >
  • B < server port="-1" shutdown="" >
  • C < server port="-1" shutdown="SHUTDOWN" >
  • D < server port="8080" shutdown="SHUTDOWN" >
Explanation

Setting Tomcat’s Server port attribute to -1 disables the TCP/IP shutdown port, so a shutdown command cannot be sent over that port. Stopping the process must therefore use operating-system process controls, which are governed by process ownership and privileges. The shutdown value may remain SHUTDOWN because no shutdown listener is active. Apache Tomcat Server Configuration Reference

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!