Question 1

The ____ collector is a generational collector that has been implemented to emphasize the throughput of the application or low garbage collection pause times.
A) incremental low pause
B) concurrent low pause
C) throughput
D) serial

Accepted Answer

The throughput collector is designed to maximize application throughput by minimizing the time spent in garbage collection, making it suitable for applications where high throughput is a priority.

Question 2

____ objects imply that contents can be changed.
A) Static
B) Mutable
C) Instance
D) Public

Accepted Answer

Mutable objects can have their contents changed, while static objects cannot. Instance and public are not attributes that determine if the content of an object can be changed.

Question 3

In Java, a sandbox provides strong protection against nuisances and denial of service (DOS) attacks.

Accepted Answer

A sandbox in Java is primarily designed to provide a secure environment to run untrusted code, limiting its access to system resources and functions to prevent malicious activities. However, it does not specifically protect against denial of service (DOS) attacks, which are aimed at making a service unavailable rather than exploiting security vulnerabilities in the code.

Question 4

Calling the ____ method instructs the JVM to recycle unused objects in order to make the memory available for quick reuse.
A) free
B) delete
C) release
D) gc

Accepted Answer

The GC (garbage collector) method in Java is responsible for identifying and freeing up memory that is no longer being used by a program. When objects are no longer needed, the garbage collector automatically releases the memory they were using, leaving it available for other objects. This helps to ensure that memory is used efficiently and prevents programs from running out of memory due to memory leaks or other issues. Therefore, the correct choice is option D – `gc`.

Question 5

With automatic ____, the Java programmer is freed of the complex task of deciding when and where to safely release memory.
A) stack access
B) memory access
C) garbage collection
D) heap management

Accepted Answer

Garbage collection is the automatic process of freeing up memory in Java by removing objects that are no longer being used. This is important for the efficient use of memory and helps prevent memory leaks. Garbage collection relieves the Java programmer of the complex task of deciding when and where to safely release memory, making it a crucial feature of Java's memory management system.

Question 6

____ generation is defined as objects allocated in a generation for shorter-lived objects in memory.
A) Young
B) Single
C) Simple
D) Early

Accepted Answer

The young generation is defined as the objects allocated for shorter-lived objects in memory. The young generation is also known as the nursery or newborn generation. It consists of two survivor spaces and one eden space.

Question 7

No class in the same package can access an inner class after it is compiled.

Accepted Answer

Other classes in the same package can access an inner class after it is compiled, as long as the inner class is declared with the "public" or "protected" access modifier.

Question 8

The Java programming language is a multiplatform programming language.

Accepted Answer

Java can run on various platforms such as Windows, Linux, and Mac OS, due to its philosophy of "write once, run anywhere."

Question 9

The syntax of Java language started as a subset of the popular object-oriented language C++.

Accepted Answer

Java was designed to have a similar syntax to C++ but with simpler features, making it easier for programmers to learn and use.

Question 10

The JVM relies on the platform and various software technologies to present a secure location where Java programs run. This secure location is called a(n) ____ in JVM terminology.
A) procedure domain
B) execution domain
C) callbox
D) sandbox

Accepted Answer

The secure location where Java programs run in JVM terminology is called a "sandbox". It provides a secure environment that restricts the actions of the program, such as accessing system resources or executing dangerous code. This helps prevent malicious code from causing harm to the system.

Question 11

Under the ____ model, each Java class executes within one and only one protection domain.
A) graybox
B) sandbox
C) protection-mapping
D) domain

Accepted Answer

The answer of Under the ____ model, each Java class...

Question 12

____ are used instead of pointers to allow Java programmers to create data structures.
A) References
B) Structs
C) Records
D) Nodes

Accepted Answer

Java does not use pointers, instead it uses references. References are used to allow Java programmers to create data structures such as objects, arrays, and linked lists. Choice B, C, and D are not correct because they are not typically used in Java programming.

Question 13

To build a secure and efficient Java program, a developer should always try the collector chosen by the JVM on the application first.

Accepted Answer

The collector chosen by the JVM on the application is optimized for the specific application and can provide better performance and security. Therefore, it is recommended to try the default collector first. If required, developers can then experiment with other collectors that are available.

Question 14

When a class is presented to run in a JVM, the ____ finds the class, loads the byte codes, performs verification, executes its main method, and then loads any supplemental classes.
A) ClassProfile
B) ClassHandler
C) ClassLoader
D) ClassBooting

Accepted Answer

The ClassLoader is responsible for finding the class, loading its byte codes, performing verification, executing its main method, and then loading any supplemental classes.

Question 15

A ____ object is defined as an object that is no longer be reached from any pointer in running programs under a JVM.
A) young
B) linear
C) serial
D) garbage

Accepted Answer

A garbage object is one that is no longer reachable from any pointer in the running programs under a JVM. This means that the object cannot be accessed by any part of the program, and therefore it is eligible for garbage collection. Young, linear, and serial are not relevant in describing an object's eligibility for garbage collection.

Question 16

The ____ security model is used as the original Java security model.
A) black box
B) graybox
C) security by signing
D) sandbox

Accepted Answer

The original Java security model is based on the concept of a "sandbox." In this model, code is restricted to certain actions and resources, preventing it from accessing sensitive areas of the system. The sandbox model is designed to provide a secure environment for executing untrusted code, such as code downloaded from the internet.

Question 17

The ____ extends ClassLoader with additional support for defining classes with an associated code source and permissions that are retrieved by the system policy by default.
A) SecureClassLoader
B) URLClassLoader
C) PolicyClassLoader
D) DomainClassLoader

Accepted Answer

The description fits SecureClassLoader the most accurately. SecureClassLoader is an extension to ClassLoader that adds support for loading classes with an associated code source and permissions. This makes it a good choice for applications that require strong security measures. URLClassLoader is used for loading classes from a specific URL, whereas PolicyClassLoader and DomainClassLoader are not standard Java classes.

Question 18

____ is used to load classes and resources from a search path of URLs referring to both Java archive (JAR) files and directories.
A) DomainClassLoader
B) URLClassLoader
C) RemoteClassLoader
D) SecureClassLoader

Accepted Answer

URLClassLoader is used to load classes and resources from a search path of URLs referring to both Java archive (JAR) files and directories. The other options are not relevant to this use case.

Question 19

A programmer can exam the byte codes by disassembling a class file using the command ____ .
A) java -c class_name
B) javap -c class_name
C) javac -c class_name
D) java -p class_name

Accepted Answer

The command "javap -c" is used to disassemble a class file and display its byte codes. Option A, "java -c", is not a valid command. Option C, "javac -c", is used to compile a Java source code file but does not display the byte codes. Option D, "java -p", is used to display the system properties and not the byte codes.

Question 20

The ____ provides fine-grained control on what operation can be run within the JVM.
A) ClassLoader
B) SecurityManager
C) SecurityException
D) SecuritySandbox

Accepted Answer

The SecurityManager class provides fine-grained control over what operations can be run within the Java virtual machine (JVM) by defining a security policy. It can be used to restrict file access, network access, and other potentially dangerous operations to increase the security of the JVM. The other options, ClassLoader, SecurityException, and SecuritySandbox, do not provide this level of control.

Quiz 5: Java Programming Security

The ____ collector is a generational collector that has been implemented to emphasize the throughput of the application or low garbage collection pause times.

____ objects imply that contents can be changed.

In Java, a sandbox provides strong protection against nuisances and denial of service (DOS) attacks.

Calling the ____ method instructs the JVM to recycle unused objects in order to make the memory available for quick reuse.

With automatic ____, the Java programmer is freed of the complex task of deciding when and where to safely release memory.

____ generation is defined as objects allocated in a generation for shorter-lived objects in memory.

No class in the same package can access an inner class after it is compiled.

The Java programming language is a multiplatform programming language.

The syntax of Java language started as a subset of the popular object-oriented language C++.

The JVM relies on the platform and various software technologies to present a secure location where Java programs run. This secure location is called a(n) ____ in JVM terminology.

Under the ____ model, each Java class executes within one and only one protection domain.

____ are used instead of pointers to allow Java programmers to create data structures.

To build a secure and efficient Java program, a developer should always try the collector chosen by the JVM on the application first.

When a class is presented to run in a JVM, the ____ finds the class, loads the byte codes, performs verification, executes its main method, and then loads any supplemental classes.

A ____ object is defined as an object that is no longer be reached from any pointer in running programs under a JVM.

The ____ security model is used as the original Java security model.

The ____ extends ClassLoader with additional support for defining classes with an associated code source and permissions that are retrieved by the system policy by default.

____ is used to load classes and resources from a search path of URLs referring to both Java archive (JAR) files and directories.

A programmer can exam the byte codes by disassembling a class file using the command ____ .

The ____ provides fine-grained control on what operation can be run within the JVM.