Blog Archives
1 2 3

Debugging SSL issues in Java & tools to debug

Q1. What are some of the issues you encounter with SSL handshake? A1. Some of the issues you try to debug are Presence of a valid certificate in trust store Incorrect certificate chains in the client or server truststore Invalid key algorithm used for private keys Expired certificate Incorrect passwords...

Members Only Content
Log In Register Home


HTTP Basic Authentication Interview Q&A for Java developers & architects

Q1. What do you understand by the term “HTTP Basic Authentication”? A1. HTTP Basic authentication is the simplest “access controls” technique for web resources like RESTful web service call. It doesn’t require cookies, session identifier and login pages. You need to pass just username and password to the resource. …...

Members Only Content
Log In Register Home


Injection attack prevention Q&A

Q1. What are the different types of injection security vulnerabilities? A1. SQL Injection, Log Injection, HTTP Response Splitting, XPath Query injection, and LDAP injection. Q2. What is an SQL injection vulnerability, and how will you go about preventing it? A2. … Read more ›...

Members Only Content
Log In Register Home


Preventing XSS attacks in Java

Cross Site Scripting (XSS) is one of the most common security problems in today’s web applications, and the second most common is the SQL injection attack. Both account for ~ 70% to 80% of the security threats of which XSS attacks are accountable for ~ 50% to 60%. Q1. …...

Members Only Content
Log In Register Home


Security holes & how to fix them interview Q&A

Security is of paramount importance to any application or website. Applications with security vulnerabilities can not only tarnish the reputation of a company, but also can adversely impact the bottom-line of that organization. So, it really pays for the organizations to have the right people who can identity potential security...

Members Only Content
Log In Register Home


Session Hijacking prevention Questions & Answers

Q1. Does the following code pose any security risk? if yes, how will you fix it? A1. The above code is a security risk. Never store sensitive data in a cookie. Instead, save it in the session on the server side, and store the session id in the cookie. …...

Members Only Content
Log In Register Home


Spring security tutorial

Spring security pre-authentication scenario assumes that a valid authenticated user is available via  either Single Sign On (SSO) applications like Siteminder, Tivoli, etc or a X509 certification based authentication. The Spring security in this scenario will only be used for authorization.

The example shown below retrieves the user name via the HTTP headers.

Read more ›



1 2 3

800+ Java Interview Q&As Menu

Learn by categories on the go...
Learn by categories such as FAQs – Core Java, Key Area – Low Latency, Core Java – Java 8, JEE – Microservices, Big Data – NoSQL, Architecture – Distributed, Big Data – Spark, etc. Some posts belong to multiple categories.
Top