C5050-408Preview

An application developer wants to test the application inside Worklight Studio but with an external Liberty profile. Using the RUN As > Build Settings and command, the application developer configured the Worklight Server with the external Liberty profile.

Deploy Target -
Before the application developer can connect the application in Worklight Studio to an existing Liberty profile, which of the following must the application developer verify?

The application developer needs to test the Worklight application on a remote server. In Worklight Studio, the application developer configures the remote server
.
Which step does the application developer need to perform to ensure the server configuration changes are reflected in the application?

Which one of the following correctly describes the content of the corresponding Worklight Application folder?

Which characteristic(s) of an application map to the respective development approaches?
Characteristics of the Application

1. The application is written for a specific platform and runs on that platform only.
2. The application runs inside the browser of the mobile device, and uses standard technologies such as HTML5, CSS3, and JavaScript.
3. The application runs inside a native container and uses the browser engine to display the application interface.
4. The application is not distributed through an application store.
   Development Approach (see exhibit)

What is the purpose of the Application Center?
The Application Center is:

An application developer is developing an Android based Hybrid application but the application is returning an error on the startup process.
What are two valid initialization failure statuses that the application developer can identify on the startup process?

An application developer has started configuring header-based authentication for an application. So far, the developer has implemented the security test and login module as follows:
<securityTests>
<customSecurityTest name="HeaderTest">
<test realm="RealmHeader" isInternalUserID="true" />
</customSecurityTest>
</securityTests>
<loginModules>
<loginModule name="HeaderLogin">
<className>com.worklight.core.auth.ext.HeaderLoginModule</className>
<parameter name="user-name-header" value="username"/>
</loginModule>
</loginModules>
Which of the following is a valid realm definition that the application developer can use for this header login module?

An application developer has determined that Worklight does not provide an authenticator that meets the complex needs of the application being developed. It is decided that the developer must implement a custom authenticator.
Which interface must the application developer implement?

An application developer has implemented certificate based authentication. The developer wants to enforce that the application immediately authenticates with a certificate when connecting to the Worklight server.
What must the application developer do to configure this security setting for the Android environment?

An application developer is implementing the server-side components for custom device provisioning. To accomplish this task, the developer has created the adapter named ProvisioningAdapter. Finally, two functions must be added to complete the task.
What must the two functions do that the application developer should add to the adapter?

An application developer is working with the Worklight administrator to secure a mobile application using adapter based authentication. The administrator provides the following configuration in the authenticationConfig.xml file.
<securityTests>
<customSecutityTest name="AuthenticationAdapter-securityTest">
<test isInternalUserID="true" realm="AdapterAuthRealm"/>
</customSecutityTest>
</secutityTests>
<realms>
<realm loginModule="AdapterAuthLoginModule" name="AdapterAuthRealm">
<className>com.worklight.integration.auth.AdapterAuthenticator</className>
<parameter name="login-function" value="AuthAdapter.onAuthRequired"/>
<parameter name="logout-function" value="AuthAdapter.onLogout"/>
</realm>
<realms>
<loginModules>
<loginModule name="AdapterAuthLoginModule">
<className>com.worklight.core.auth.ext.NonValidatingLoginModule</className>
</loginModule>
</loginModules>
What must the application developer do to ensure security is enforced as required?

An application developer is securing an application by using an adapter. The application developer has registered the following procedures in the adapter's xml file.
<procedure name="submitAuthentication" />
<procedure name="requestForData" securityTest="AuthAdapterTest" />
Which function must the application developer invoke in the authentication adapter at the end of the login sequence to consider the user's session authenticated?

An application developer has implemented the following security test to protect a mobile application.
<mobileSecurityTest name="mobileTest">
<testUser realm="myMobileLoginForm"/>
<testDeviceID provisioningType="none" />
</mobileSecurityTest>
The corporate security team has recently learned about cross-site request forgery (XSRF) attacks against the company's website. The corporate security team wants to prevent further attacks and has asked the developer to protect the mobile application against XSRF attacks.
What step must the application developer take to protect against XSRF attacks?

An application developer is implementing form-based authentication. The developer has created a challenge handler object to handle challenges from the
SampleAppRealm by invoking createChallengeHandler on WL.Client as follows: var sampleAppRealmChallengeHandler = WL.Client.createChallengeHandler ("SampleAppRealm");
Which function of the challenge handler must the application developer implement?