Behavioral Java Security Interview Questions & Answers:

1. What is GPT and GPC?

GPT is Group policy template and GPC is group policy container in Java Security

2. Where are group policies stored?

Group policies stored at:
%SystemRoot%System32GroupPolicy

3. Why doesn't LSDOU work under Windows NT?

If the NTConfig.pol file exist, it has the highest priority among the numerous policies.

4. What is LSDOU?

It's group policy inheritance model, where the policies are applied to Local machines, Sites, Domains and Organizational Units.

5. I am trying to create a new universal user group. Why can't I?

Universal groups are allowed only in native-mode Windows Server 2003 environments. Native mode requires that all domain controllers be promoted to Windows Server 2003 Active Directory.

6. What's the difference between local, global and universal groups?

Domain local groups assign access permissions to global domain groups for local domain resources. Global groups provide access to resources in other trusted domains. Universal groups grant access to resources in all trusted domains.

7. Are the actual permissions for the application defined at run-time or compile-time?

The CLR computes actual permissions at runtime based on code group membership and the calling chain of the code.

8. What are the authentication modes in ASP.NET?

Authentication modes in ASP.NET is None, Windows, Forms and Passport.

9. What's the difference between authentication and authorization?

Authentication happens first. You verify user's identity based on credentials. Authorization is making sure the user only gets access to the resources he has credentials for.

10. What's a code group?

A code group is a set of assemblies that share a security context.