During the deployment planning phase for a Java web application, which activity is most directly part of environment hardening?

Removing unnecessary services and default accounts from the application server host

Writing the application's user documentation

Selecting the JDK version for compilation

What is a recommended practice for maintaining the security of a Java application's configuration over time?

Storing configuration files in the application's public web root

Keeping the original default configuration to avoid introducing errors

Periodically reviewing and updating configuration settings to align with current security baselines

Allowing any team member to change configuration without documentation

What is the primary purpose of a security patch management process for Java applications?

To comply with licensing agreements for third-party libraries

To reduce the application's memory footprint

To systematically apply updates that fix known vulnerabilities in the application and its dependencies

To ensure the application is always running the latest version with new features

What is the primary security goal when decommissioning a Java application?

Keeping the application running for a few more months for testing

Ensuring that sensitive data and credentials are securely destroyed or transferred

Freeing up disk space as quickly as possible

Moving the application to a different server without any changes

Which database configuration practice is considered secure for a Java application in production?

Granting the application database user administrative privileges

Using the database's default port and default credentials

Disabling database audit logging to improve performance

Encrypting sensitive data at rest and in transit

EC-CouncilCertified Application Security Engineer (Java)

Domain 8Objective 2

Secure Deployment and Maintenance CASEJAVA Practice Questions (Page 6)

Part of the Security Testing and Secure Deployment domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 3–5 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

7concepts

Questions 26–30

26foundation · easy
During the deployment planning phase for a Java web application, which activity is most directly part of environment hardening?
Select an answer first
27foundation · easy
What is a recommended practice for maintaining the security of a Java application's configuration over time?
Select an answer first
28foundation · easy
What is the primary purpose of a security patch management process for Java applications?
Select an answer first
29foundation · easy
What is the primary security goal when decommissioning a Java application?
Select an answer first
30foundation · easy
Which database configuration practice is considered secure for a Java application in production?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CASEJAVA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CASEJAVA” is a trademark of its owner, used for identification only.