SCWCD : Web Application Security Mock Exam Practice Questions

Questions no -1 
Which of the following  is the mandatory sub-elements of login-config element ?



options
A)realm-name
B)auth-method
C)form-login-config
D)login-config doesn't have mandatory sub-elements

Correct answer is : D

Explanations : login-config doesn't have mandatory sub-elements.

Questions no -2 
Which of the following statement true about HTTP Digest Authentication ?



options
A)Authentication is performed by transmitting the password in an ENCRYPTED .
B)Authentication is performed by transmitting the password in an NOT ENCRYPTED
C)SSL connection
D)All of the above

Correct answer is : A

Explanations : Authentication is performed by transmitting the password in an ENCRYPTED in HTTP Digest Authentication . But not SSL.