quiz 1

What is Java EE development?

• D. A tool for graphic design

• C. A type of operating system

• A. A standard in community-driven enterprise software

• B. A programming language for mobile apps

What is the purpose of Java EE security services?

• A. To provide entertainment services

• D. To develop video games

• B. To authenticate users and authorize access to application functions

• C. To offer cloud storage solutions

What is the difference between declarative and programmatic security in Java EE?

• A. Declarative security is embedded in an application, while programmatic security uses deployment descriptors

• B. Declarative security is used for authentication, while programmatic security is used for authorization

• D. Declarative security is used for program logic, while programmatic security is used for user interface design

• C. Declarative security expresses security requirements using deployment descriptors, while programmatic security is embedded in an application

What is the purpose of field-level encryption in application-level encryption?

• C. To encrypt data during transmission

• B. To encrypt only specific fields of data

• D. To encrypt data at rest

• A. To encrypt the entire application

Why is secure software development important?

• B. To increase the number of vulnerabilities

• D. To slow down the development process

• C. To decrease the risk of vulnerabilities during development

• A. To make the software more expensive

What is the main idea of secure software development?

• To prioritize security as an integral part of development

• To focus only on functional requirements

• To perform security testing after development

• To ignore security until the deployment phase

What does REST API security aim to ensure?

• Quantity of data exchanged between systems

• Confidentiality, integrity, and availability of data exchanged between systems

• Complexity and obscurity of data exchange

• Speed and efficiency of data transfer

What is the purpose of HMAC in data communication?

• To authenticate users and ensure data integrity

• To encrypt all data for security

• To compress data for faster transmission

• To anonymize user identities

What is the role of an Identity Provider (IdP) in SAML authentication?

• To store and confirm user identity

• To provide cloud storage services

• To develop cloud-hosted applications

• To manage network security

What is the key difference between SAML and OAuth?

• OAuth is used for Single Sign-On, while SAML is for data encryption

• OAuth is designed for enterprise security, while SAML is for mobile applications

• SAML uses JSON for message passing, while OAuth uses XML

• SAML is for authentication and authorization, while OAuth is solely for authorization