Java Web Security Quiz:
Let's assume that you are building an application using HTTP FORM-based authentication. You will use an HTML FORM to capture the username and password. Which of the following is true? A. The action attribute of the FORM must be set to "j_security_check" B. The form must have the "j_username" and "j_password" input fields C. You must enable HTTPS / SSL support to be able to use HTTP FORM-based authentication D. HTTP FORM-based authentication is NOT compatible with HTTPS / SSL support.
[Ans: A, B]
The requirements when using HTML FORM based authentication is that the action attribute must be set to j_security_check and the j_username and j_password fields must be used. Specifically,
<form method="POST" action="j_security_check"> <input type ="text" name="j_username"> <input type="password" name="j_password"> </form>
HTTP Form is independent of SSL /HTTPS support, and can be used with or without SSL enabled.
HRCI Certifications : PHR, SPHR, GPHR | PMI Certifications: PMP Java Certifications : SCWCD, SCBCD, SCJDWS, SCJP | Security Certifications: CISSP, CISA