Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ224

Designing for security and compliance

You deploy a custom Java application to Google App Engine. The deployment fails and produces the following stack trace.

What should you do?

Question Image

  • A Upload missing JAR files and redeploy your application.
  • B Digitally sign all of your JAR files and redeploy your application
  • C Recompile the CLoakedServlet class using and MD5 hash instead of SHA1
Explanation

A SHA1 digest error from Java’s JAR verifier means a class file does not match the integrity digest stored in its signed JAR’s manifest. Re-signing the JAR files regenerates signature metadata that matches the deployed contents; missing JARs and changing the class compilation to MD5 do not correct that manifest-digest mismatch.

Community Discussion

No comments yet. Be the first to start the discussion!