4166 Final Exam Review 2023 with complete solution questions and answers

Before you can use JSTL in your JSPs, you have to make the ___________ files for the JSTL library available to your application. JAR Before you can use JSTL in a JSP, you need to code a _______________ directive. taglib To help prevent your code from breaking if the application context changes, you can use the JSTL _______________________ tag to encode URLs within your web application so they are relative to the application's root directory. url The ________________ provides tags for common JSP tasks. JSTL Cross-site scripting (XSS) attacks occur when an attacker attempts to insert malicious ________________ into your HTML pages. Javascript To add a parameter to a parent tag, you can use the JSTL ________________ tag. param By default, the url tag automatically rewrites the URL to include the ________________ whenever necessary. This isn't secure as it can lead to session hijacking. sessionID SSL (Secure Sockets Layer) is an older protocol used by the Internet that lets clients and servers communicate over a ________________. Secure Connection The URL that uses a secure connection to connect to is ________________. The process of determining whether a server or client is who and what it claims to be is called ___________ Authentication A ________________ digital secure certificate enables you to test SSL connections in a local environment without purchasing a secure certificate. self-signed When a secure connection is used, the data that's passed between client and server is ________________. encrypted ________________ is the successor to SSL, and it works similarly. TLS Before you can use JDBC to connect to a database, you must make a/an ________________ available to your application. Database driver To create a Statement object, you use one of the methods of the ________________ object. Connection To retrieve a result set by executing a SELECT statement from a Statement object, you use the ________________ method of the Statement object. executeQuery To execute an INSERT statement from a Statement object, you use the ________________ method of the Statement object. executeUpdate When a browser makes an initial attempt to communicate with a server over a secure connection, the server authenticates itself by________. Providing a digital secure certificate to the client A digital secure certificate is provided Usually for a fee from a certificate authority The maximum SSL strength for an application's connections is determined by_________ The digital secure certificate Once you establish a secure connection, the application continues to use a secure connection until an absolute URL specifies a non-secure connection SSL strength can depend on the strength provided by the certificate the strength supported by the web server the strength supported by the browser all of the above To use a secure connection, you need to Install a digital secure certificate on your web server And configure your web server so it defines a secure connection To create a self-signed certificate, you need to create a/an ________________ file. Keystore Before a secure connection is established, the server uses a ________________ to authenticate itself. A server certificate To use SSL to transmit data, the ________________ must provide authentication. Both the client and he server SSL (Secure Sockets Layer) is an older protocol used by the Internet that lets clients and servers communicate over a ________________. Secure connection The URL that uses a secure connection to connect to is ________________. The process of determining whether a server or client is who and what it claims to be is called ________________. authentication A ________________ digital secure certificate enables you to test SSL connections in a local environment without purchasing a secure certificate. Self-signed When a secure connection is used, the data that's passed between client and server is ________________. encrypted ________________ is the successor to SSL, and it works similarly. TLS A type of digital secure certificate issued to a trusted server so client computers can connect to them using secure connections is called a/an ___________________. Server certificate A company that issues and manages security credentials is called a/an CA or certificate authority SSL ________________ refers to the length of the generated key that is created during the encryption process. Strength The ________________ API is a collection of Java classes that let you use secure connections within your Java programs by implementing a version of the SSL and TLS protocols. JSSE or Java Secure Socket Extension before you can use JDBC to connect to a database, you must make a/an ________________ available to your application. Database driver To create a Statement object, you use one of the methods of the ________________ object Connection To execute an INSERT statement from a Statement object, you use the ________________ method of the Statement object. executeUpdate To get data from a result set, you use the get methods of the ________________ object. ResultSet To specify the location of a/an ________________ in the SQL statement for a prepared statement, you type a question mark (?) in the SQL statement. Parameter To improve the performance of database operations, an application can use a connection ________________. Pool Creating a Student object from data that's stored in a Student table in a database is a partial implementation of ________________ mapping. O/R (object-relational) One technique that can help prevent SQL injection attacks is to use ________________ statements. Prepared To move the cursor through a result set, you can use the methods of the ResultSet object To get information about a result set like the number of columns and names of the columns, you can use the methods of the ResultSetMetaData object Connection pooling improves database performance because a pool of connections are available for users of the application to share In a SQL injection attack, an attacker attempts to execute SQL statements against your database modify data delete data all of the above The getXXX methods can be used to return ________________ of the eight primitive types. all