Deck 5: Java Programming Security

Question 1

16)The ____ collector is a generational collector that has been implemented to emphasize the throughput of the application or low garbage collection pause times.

A) incremental low pause
B) concurrent low pause
C) throughput
D) serial

Answer 1

C

Question 2

17)____ objects imply that contents can be changed.

A) Static
B) Mutable
C) Instance
D) Public

Answer 2

B

Question 3

2)In Java, a sandbox provides strong protection against nuisances and denial of service (DOS) attacks.

Answer 3

False

Question 4

13)Calling the ____ method instructs the JVM to recycle unused objects in order to make the memory available for quick reuse.

A) free
B) delete
C) release
D) gc

Question 5

12)With automatic ____, the Java programmer is freed of the complex task of deciding when and where to safely release memory.

A) stack access
B) memory access
C) garbage collection
D) heap management

Question 6

14)____ generation is defined as objects allocated in a generation for shorter-lived objects in memory.

A) Young
B) Single
C) Simple
D) Early

Question 7

5)No class in the same package can access an inner class after it is compiled.

Question 8

1)The Java programming language is a multiplatform programming language.

Question 9

3)The syntax of Java language started as a subset of the popular object-oriented language C++.

Question 10

6)The JVM relies on the platform and various software technologies to present a secure location where Java programs run. This secure location is called a(n) ____ in JVM terminology.

A) procedure domain
B) execution domain
C) callbox
D) sandbox

Question 11

20)Under the ____ model, each Java class executes within one and only one protection domain.

A) graybox
B) sandbox
C) protection-mapping
D) domain

Question 12

11)____ are used instead of pointers to allow Java programmers to create data structures.

A) References
B) Structs
C) Records
D) Nodes

Question 13

4)To build a secure and efficient Java program, a developer should always try the collector chosen by the JVM on the application first.

Question 14

8)When a class is presented to run in a JVM, the ____ finds the class, loads the byte codes, performs verification, executes its main method, and then loads any supplemental classes.

A) ClassProfile
B) ClassHandler
C) ClassLoader
D) ClassBooting

Question 15

15)A ____ object is defined as an object that is no longer be reached from any pointer in running programs under a JVM.

A) young
B) linear
C) serial
D) garbage

Question 16

18)The ____ security model is used as the original Java security model.

A) black box
B) graybox
C) security by signing
D) sandbox

Question 17

9)The ____ extends ClassLoader with additional support for defining classes with an associated code source and permissions that are retrieved by the system policy by default.

A) SecureClassLoader
B) URLClassLoader
C) PolicyClassLoader
D) DomainClassLoader

Question 18

10)____ is used to load classes and resources from a search path of URLs referring to both Java archive (JAR) files and directories.

A) DomainClassLoader
B) URLClassLoader
C) RemoteClassLoader
D) SecureClassLoader

Question 19

7)A programmer can exam the byte codes by disassembling a class file using the command ____ .

A) java -c class_name
B) javap -c class_name
C) javac -c class_name
D) java -p class_name

Question 20

19)The ____ provides fine-grained control on what operation can be run within the JVM.

A) ClassLoader
B) SecurityManager
C) SecurityException
D) SecuritySandbox

Question 21

40)Briefly describe the ProtectionDomain class.

Question 22

26)The ____ class is used for access control operations and decision making.

A) AccessController
B) SecurityManager
C) ClassLoader
D) java.security.Object

Question 23

34)What is the design goal of the Java language?

Question 24

38)How does a concurrent low pause collector work?

Question 25

30)____________________ is a memory-management activity carried out by the Java runtime environment to reclaim dynamically allocated memory that is no longer being used.

Question 26

37)How does a serial collector work?

Question 27

31)A(n) ____________________ serves as a group that contains objects that have the same accessibility and protection.

Question 28

35)How does Java prevent invalid memory access?

Question 29

29)____________________ builds an environment that provides separate name spaces for classes loaded from different locations.

Question 30

25)Regarding protection domains, when an object from one domain calls code from another domain, the rule of ____ is employed.

A) uniqueness
B) complement
C) union
D) intersection

Question 31

36)What are the advantages and disadvantages of automatic garbage collection?

Question 32

41)Regarding protection domains, how can objects in one domain automatically discover objects in another domain?

Question 33

33)Describe the four-step Java byte code verification process.

Question 34

22)A ____ object represents the policy for a Java application environment.

A) security
B) policy
C) permission
D) grant

Question 35

21)The core of Java permissions is the ____ class.

A) java.security.Permission
B) ClassLoader
C) java.security.Policy
D) SecurityManager

Question 36

24)A ____ is a database of private keys and their associated digital certificates.

A) permission store
B) grant entry
C) keystore
D) policy rule

Question 37

27)All Java programs run on a common platform called the ____________________.

Question 38

23)Individual permissions can be set using the ____ program without any programming.

A) policytool
B) securityManager
C) gc
D) policy

Question 39

28)Java ____________________ is the machine language of the JVM.

Question 40

39)What are the attributes of a protection domain?

Question 42

42)What are the purposes of the AccessController class?