GSSP-Java GIAC Secure Software Programmer – Java Free Practice Exam Questions (2025 Updated)

You work as an Application Deployer for UcTech Inc. You want to configure a filter for a Web application using the deployment descriptor. Which of the following attributes are mandatory for you to implement in order to accomplish the task?

Each correct answer represents a complete solution. Choose all that apply.

You work as a developer for PassGuide Inc. You have implemented a session bean with a method doPrint(), which behaves differently depending on the caller's security role. Only MANAGER in the security roles "ADMIN" and "MANAGER" are allowed to call the method. Which of the following actions are appropriate to accomplish if there is no security-related metadata in the deployment descriptor?

Each correct answer represents a complete solution. Choose all that apply.

Mark works as a Programmer for InfoTech Inc. He creates a method named roomBooking() and this method throws IndexOutOfBoundsException. Which of the following roles will automatically handle the exception?

Which of the following init() method calls initializes a cipher object with a key in the SECRET_MODE?

Which of the following methods specifies which LoginModules should be used for a particular application, and in what order the LoginModules should be invoked?

Mark works as a Programmer for InfoTech Inc. He develops the following program.

class iftest2

{public static void main(String args[])

{int x=0, y=1;if //code//{System.out.println("true");}}}

Which of the following if statements are illegal if they are placed at //code//?

Which of the following statements about the isUserInRole() method are true?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following attribute scopes does not exist for a Servlet?

Which of the following is the valid permission for a BasicPermission?

Which of the following exceptions is thrown if a class uses the clone() method but does not implement the Cloneable interface?

You have written the following code snippet.

1. public class Read {

2. protected int ReadText(int x) { return 0; }

3. }

4. class Text extends Read {

5. /*insert code here*/

6. }

Which of the following methods, inserted independently at line 5, will compile?

Each correct answer represents a complete solution. Choose all that apply.

Which of the following exceptions will be thrown if the commit() method fails?

The __________ interface accepts results from a SQL SELECT statement.

Which of the following methods evaluates the global policy for the permissions granted to the

ProtectionDomain and tests whether the permission is granted?

Identify whether the given statement is true or false.

"When a Java program starts up, one thread begins running immediately."

Which of the following will be returned by the expression "string" instanceof String?

Which of the following is a mandatory sub-element of the element of the deployment descriptor?

Which of the following is not a type of authentication?

You work as a developer for PassGuide Inc. You have implemented a session bean with a method doPrint(), which behaves differently depending on the caller's security role. Only MANAGER in the security roles "ADMIN" and "MANAGER" are allowed to call the method. Which of the following actions are appropriate to accomplish if there is no security-related metadata in the deployment descriptor?

Each correct answer represents a complete solution. Choose all that apply.