C5050-408

C5050-408 practice questions, page 3 of 3, with answer review and explanations.

Question 11

An application developer has started configuring header-based authentication for an application. So far, the developer has implemented the security test and login module as follows: com.worklight.core.auth.ext.HeaderLoginModule Which of the following is a valid realm definition that the application developer can use for this header login module?

  1. <realms> <realm name="RealmHeader" loginModule="HeaderLogin"/> </realms>
  2. <realms> <realm name="RealmHeader" loginModule="HeaderLogin"> <onLoginUrl>/login.html</onLoginUrl> </realm> </realms>
  3. <realms> <realm name="RealmHeader" loginModule="HeaderLogin"> <className>com.worklight.core.auth.ext.HeaderAuthenticator</className> </realm> </realms>
  4. <realms> <realm name="RealmHeader" loginModule="HeaderLogin"> <className>com.worklight.integration.auth.ext.HeaderAuthenticator</className> </realm>

Question 12

An application developer has determined that Worklight does not provide an authenticator that meets the complex needs of the application being developed. It is decided that the developer must implement a custom authenticator. Which interface must the application developer implement?

  1. com.worklight.core.auth.api.CustomAuthenticator
  2. com.worklight.core.auth.api.AuthenticationService
  3. com.worklight.server.auth.api.CustomAuthenticator
  4. com.worklight.server.auth.api.WorkLightAuthenticator

Question 13

An application developer has implemented certificate based authentication. The developer wants to enforce that the application immediately authenticates with a certificate when connecting to the Worklight server. What must the application developer do to configure this security setting for the Android environment?

  1. Add protection for static resources in the authenticationConfig.xml file.
  2. Add the certificate-based securityTest as an attribute to the android element in the applicationDescriptor.xml file.
  3. Enable and configure certificate based authentication in the worklight.properties file.
  4. Enable WebShere Application Server application security to enforce authentication by WebShere Application Server.

Question 14

An application developer is implementing the server-side components for custom device provisioning. To accomplish this task, the developer has created the adapter named ProvisioningAdapter. Finally, two functions must be added to complete the task. What must the two functions do that the application developer should add to the adapter?

  1. Validate the certificate from the device is still valid. Validate that the device is authorized to be provisioned.
  2. Validate the certificate from the device is still valid. Validate the provisioning request.
  3. Validate that the device provisioning is triggered. Validate that the login module provides the correct credentials.
  4. Validate that the device provisioning is triggered.