IBM C5050-408 Exam Practice Questions (P. 4)

An application developer is securing an application by using an adapter. The application developer has registered the following procedures in the adapter's xml file.
<procedure name="submitAuthentication" />
<procedure name="requestForData" securityTest="AuthAdapterTest" />
Which function must the application developer invoke in the authentication adapter at the end of the login sequence to consider the user's session authenticated?

An application developer has implemented the following security test to protect a mobile application.
<mobileSecurityTest name="mobileTest">
<testUser realm="myMobileLoginForm"/>
<testDeviceID provisioningType="none" />
</mobileSecurityTest>
The corporate security team has recently learned about cross-site request forgery (XSRF) attacks against the company's website. The corporate security team wants to prevent further attacks and has asked the developer to protect the mobile application against XSRF attacks.
What step must the application developer take to protect against XSRF attacks?

An application developer is implementing form-based authentication. The developer has created a challenge handler object to handle challenges from the
SampleAppRealm by invoking createChallengeHandler on WL.Client as follows: var sampleAppRealmChallengeHandler = WL.Client.createChallengeHandler ("SampleAppRealm");
Which function of the challenge handler must the application developer implement?

An application developer wants to protect their application against specific malware and repackaging attacks by implementing application authenticity testing via the console. Per the requirements, the developer wishes to implement a check where the Worklight Server will test the authenticity of an application. If the application fails the authenticity check, the Worklight Server will output a message to the log containing relevant information, but the application will still run as expected.
Which type of application authenticity should the application developer implement via the console with the above requirements?

An application developer is attempting to implement device single sign-on (SSO) as specified in the following example:
<securityTests>
<mobileSecurityTest name="FormTest">
<testDeviceID provisioningType="none"/>
<testUser realm="SampleAppRealm"/>
</mobileSecurityTest>
</securityTests>
<realms>
<realm name="SampleAppRealm" loginModule="MyLoginModule">
<className>com.worklight.core.auth.ext.FormBasedAuthenticator</className>
</realm>
</realms>
<loginModules>
<loginModule name="MyLoginModule"
ssoDeviceLoginModule="WLDeviceAutoProvisioningLoginModule">
className>com.worklight.core.auth.exp.NonValidatingLoginModule</className>
</loginModule>
</loginModules>
Upon testing the configuration, the developer finds unexpected results, such as the Worklight project failing to start.
What does the application developer need to do to bring the SSO configuration to a consistent state?