Datapower Interview Questions And Answers Pdf

11. Why do we need it?
Answer: We need cryptography to share information confidentially which is ensuring the secrecy of communication
Authentication – Ajitabh can sign his message and Mulu can verify that he sent it based on his signature
Integrity checking -Mulu can generate a checksum of the message. Ajit can either extract it from the message or recalculate it and verify that the message has not been changed.
Non-repudiation – if Ajitabh signs the message he cannot deny later that he sent it, because no one else could generate that same signature/private key.

12. Explain what are the principles of API test design?
Answer: The principle for API test design is
Setup: Create objects, start services, initialize data, etc
Execution: Steps to exercise API or scenario, also logging
Verification: Oracles to evaluate execution outcome
Reporting: Pass, failed or blocked
Clean up: Pre-test state

13. What is the weakness of symmetric key cryptography and what is the strength of the asymmetric key cryptography?
Answer: Symmetric key cryptography–

– The biggest obstacle in successfully deploying a symmetric-key algorithm is the necessity for a proper exchange of private keys. This transaction must be completed in a secure manner. If the face-to-face meeting, which proves quite impractical in many circumstances when taking distance and time into account, cannot be possible to exchange private keys. If one assumes that security is a risk, to begin with, due to the desire for a secret exchange of data in the first place, the exchange of keys becomes further complicated.

– Another problem concerns the compromise of a private key. In symmetric-key cryptography, every participant has an identical private key. As the number of participants in a transaction increases, both the risk of compromise and the consequences of such a compromise increase dramatically. Each additional user adds another potential point of weakness that an attacker could take advantage of. If such an attacker succeeds in gaining control of just one of the private keys in this world, every user, whether there are hundreds of users or only a few, is completely compromised.

– Both Symmetric and Asymmetric-key cryptography also has vulnerabilities to attacks such as the man in the middle attack. In this situation, a malicious third party intercepts a public key on its way to one of the parties involved. The third-party can then instead pass along his or her own public key with a message claiming to be from the original sender. An attacker can use this process at every step of an exchange in order to successfully impersonate each member of the conversation without any other parties having knowledge of this deception.

14. Asymmetric cryptography –More secure?
Answer: – Asymmetric keys must be many times longer than keys in symmetric-cryptography in order to boost security. While generating longer keys in other algorithms will usually prevent a brute force attack from succeeding in any meaningful length of time, these computations become more computationally intensive. These longer keys can still vary in effectiveness depending on the computing power available to an attacker.

15. Explain all MQ API calls. (Not just the calls but explain them) ?
Answer:

–> MQCONN….it will connect to the queue manager

–> MQOPEN…..it will open the queue manager

–> MQPUT/GET/INQ….it is to put the message, to get the message and to inquire message,

–> MQCLOSE…….to close the connection,

–> MQDIS………to disconnect.

16. What are the tools used for API test automation?
Answer: While testing Unit and API testing, both target source code, if an API method is using code based on .NET then the tool which is supporting should have .NET
Automation tools for API testing can be used are
NUnit for .NET
JUnit for Java
HP UFT
Soap UI

17. In API document explain how to document each function? What are the tools used for documentation?
Answer: Description: Small description of what a function does
Syntax: Syntax about the parameter of the code, the sequence in which they occur, required and optional elements, etc.
Parameters: Functions parameters
Error Messages: Syntax of error messages
Example Code: Small snippet of code
Related Links: Related functions

18. What is the default log size in the log target? What happens when that log size is reached?
Answer: Log size: 500 kilobytes,
When the log file reached the limit, the system will upload it to the FTP server and if it is successfully uploaded, the appliance will delete the log in the system to free space.

19. What Is The Application Server?
Answer: The application server provides a runtime environment in which to deploy, manage, and run j2ee applications.

20. Who issues a certificate, explain in detail?
Answer: Certificate authorities act as trusted third parties that verify the identity of the sender of an encrypted message and issue digital certificates as evidence of authorization. These digital certificates contain the public key of the sender, which is then passed along to the intended recipient. The Certificate authorities do extensive background checks before giving an organization or a given individual a certificate.