CASE Secure Error Handling & Logging 5

Question 1

In Java, which exception is unchecked (does not need to be declared or caught)?

Accepted Answer

NullPointerException

Answer

NullPointerException extends RuntimeException, making it unchecked.

Question 2

In a classic ASP.NET application, which event in Global.asax can be used for centralized handling of unhandled exceptions?

Accepted Answer

Application_Error

Answer

Application_Error fires for unhandled exceptions, allowing central logging and a safe redirect.

Question 3

Which set of fields forms a minimal useful security audit record?

Accepted Answer

User identity, timestamp, event type, resource affected, and outcome

Answer

Audit records should answer who, what, when, where, and whether it succeeded.

Question 4

Which technique helps provide tamper-evidence for audit logs to support non-repudiation?

Accepted Answer

Cryptographic hash chaining or digital signing of log entries

Answer

Hash chains or signatures make any modification or deletion of entries detectable.

Question 5

In Spring MVC, which approach provides centralized exception handling across all controllers?

Accepted Answer

A class annotated with @ControllerAdvice containing @ExceptionHandler methods

Answer

@ControllerAdvice applies @ExceptionHandler methods globally for consistent, safe error responses.

(CASE) Certified Application Security Engineer Practice Test