Question 1
Which OWASP Top 10 2021 category specifically replaced 'Sensitive Data Exposure' from the 2017 list to broaden the scope of cryptography-related risks?
Correct Answer:
A02:2021 Cryptographic Failures
Question 2
In STRIDE threat modeling, which threat category maps to the security property 'Non-Repudiation'?
Correct Answer:
Repudiation
Question 3
An attacker submits the input ' OR '1'='1' -- into a login form and bypasses authentication. Which OWASP Top 10 2021 category does this BEST illustrate?
Correct Answer:
A03:2021 Injection
Question 4
Which threat-modeling deliverable is BEST used to systematically describe how an attacker might misuse a feature, rather than how a normal user uses it?
Correct Answer:
Abuse cases
Question 5
An application reflects user input into the HTML body of a response without encoding. Which attack class is MOST directly enabled?
Correct Answer:
Reflected Cross-Site Scripting (XSS)
Question 1
Exam overview

About this Exam

Prepare with the EC-Council CASE Practice Questions - EC-Council Certified Application Security Engineer (CASE .NET 312-95 Java 312-96) Exam practice quiz. This question bank includes 100 questions covering application, security, java, owasp, and category. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

EC-Council CASE Practice Questions - EC-Council Certified Application Security Engineer (CASE .NET 312-95 Java 312-96) Exam

This practice set contains 100 questions from the matching question bank and focuses on application, security, java, owasp, and category. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions