Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GSNA Exam - Topic 5 Question 36 Discussion

Posted by Marjory on Nov 24, 2023 at 04:09 PM

Which of the following statements about invalidating a session is true?

Suggested Answer: A, D

The above configuration fragment will disable the following services from the router:

The BootP service

The DNS function

The Network Time Protocol

The Simple Network Management Protocol

Hyper Text Transfer Protocol


Get Premium GSNA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
37 comments · newest first
LO
Lorrine 11 months ago
Wait, are you saying getAttribute throws an exception on invalidated sessions? That seems weird!
KE
Kent 11 months ago
Totally agree with C, it's a common practice in web apps.
DE
Deandrea 11 months ago
A sounds off, how can you get creation time from an invalidated session?
GA
Gary 11 months ago
I think B is wrong, invalidate() is part of HttpSession, not HttpServletRequest.
DE
Derrick 11 months ago
C is definitely true, you can invalidate sessions both ways.
PA
Paola 11 months ago
I thought getCreationTime() could still be called even after a session is invalidated, but I'm not 100% confident about that.
VI
Vincent 12 months ago
I feel like we had a practice question about getAttribute() throwing exceptions, but I can't recall if it was specifically for invalidated sessions.
MA
Marion 12 months ago
I'm not entirely sure, but I remember something about the invalidate() method being part of the HttpSession interface, not HttpServletRequest.
CO
Coletta 1 year ago
I think option C sounds familiar because we discussed how sessions can be invalidated in different ways during our last class.
KA
Karol 1 year ago
I'm pretty confident I know the answer to this one. The getCreationTime() method can be called on an invalidated session, so I'll go with option A.
CA
Carol 1 year ago
Okay, I think I've got this. The key is to focus on the specific methods and interfaces mentioned in the options.
DA
Daisy 1 year ago
Hmm, I'm a bit confused about the difference between programmatic and deployment descriptor invalidation. I'll need to review that part.
ON
Ona 1 year ago
This question seems straightforward, but I want to make sure I understand the concepts fully before answering.
SH
Shawn 1 year ago
Okay, let's think this through. Remote wipe capabilities would be most useful in situations where the device is lost or stolen, to prevent unauthorized access to sensitive data.
LO
Louann 1 year ago
Okay, I think I've got this. The key is to identify the condition that is not required for the courts to accept the federal estate tax value.
LA
Lawrence 1 year ago
Hey, did you hear about the programmer who got their session invalidated? They were really steamed!
SE
Serina 1 year ago
↳ replying to Lawrence
B) The invalidate() method belongs to the HttpServletRequest interface.
MI
Micah 1 year ago
↳ replying to Lawrence
Really? I didn't know that!
BO
Bonita 1 year ago
↳ replying to Lawrence
C) A session can be invalidated programmatically as well as using the deployment descriptor.
JA
Jacki 1 year ago
↳ replying to Lawrence
A) The getCreationTime() method can be called on an invalidated session.
BR
Brandon 1 year ago
D) Throwing an IllegalArgumentException? That's just weird. Why would it do that on an invalidated session? This can't be right.
GE
Genevieve 1 year ago
C) This one sounds about right. Invalidating a session can be done programmatically or using the deployment descriptor. Seems like the correct answer to me.
VA
Vashti 1 year ago
↳ replying to Genevieve
C) A session can be invalidated programmatically as well as using the deployment descriptor.
HI
Hillary 1 year ago
↳ replying to Genevieve
B) The invalidate() method belongs to the HttpServletRequest interface.
JO
Jody 1 year ago
↳ replying to Genevieve
A) The getCreationTime() method can be called on an invalidated session.
ED
Edward 1 year ago
B) The invalidate() method on the HttpServletRequest? That's just nonsense. It's part of the HttpSession interface, not the request.
CH
Christiane 1 year ago
↳ replying to Edward
User 3: The invalidate() method on the HttpServletRequest? That's just nonsense. It's part of the HttpSession interface, not the request.
VI
Viola 1 year ago
↳ replying to Edward
User 2: A session can be invalidated programmatically as well as using the deployment descriptor.
LA
Latia 1 year ago
↳ replying to Edward
User 1: The getCreationTime() method can be called on an invalidated session.
DO
Dorsey 1 year ago
A) What? The session is invalidated, how can you call getCreationTime() on it? This one's gotta be wrong.
JA
Janet 1 year ago
↳ replying to Dorsey
D) I think option A is definitely incorrect. You can't call getCreationTime() on an invalidated session.
DO
Dominic 1 year ago
↳ replying to Dorsey
C) The invalidate() method is used to invalidate a session, not getCreationTime().
DA
Daniel 1 year ago
↳ replying to Dorsey
B) Yeah, I agree. It doesn't make sense to call getCreationTime() on an invalidated session.
TA
Tamala 1 year ago
↳ replying to Dorsey
A) What? The session is invalidated, how can you call getCreationTime() on it? This one's gotta be wrong.
ER
Eric 1 year ago
I'm not sure, but I think option D is incorrect because getAttribute() method does not throw an exception on an invalidated session.
NE
Nettie 1 year ago
I agree with Sherita, because you can invalidate a session programmatically or using the deployment descriptor.
SH
Sherita 1 year ago
I think the correct answer is C.
0/2000 characters

Save Cancel