Given the security constraint in a DD：
101.<security-constraint>
102.<web-resource-collection>
103.<web-resource-name>Foo</web-resource-name>
104.<url-pattern>/Bar/Baz/*</url-pattern>
105.<http-method>POST</http-method>
106.</web-resource-collection>
107.<auth-constraint>
108.<role-name>DEVELOPER</role-name>
109.</auth-constraint>
110.</security-constraint>
And given that "MANAGER" is a valid role-name，which four are true for this security constraint？（）
A.MANAGER can do a GET on resources in the /Bar/Baz directory.
B.MANAGER can do a POST on any resource in the /Bar/Baz directory.
C.MANAGER can do a TRACE on any resource in the /Bar/Baz directory.
D.DEVELOPER can do a GET on resources in the /Bar/Baz directory.
E.DEVELOPER can do only a POST on resources in the /Bar/Baz directory.
F.DEVELOPER can do a TRACE on any resource in the /Bar/Baz directory.
您可能感興趣的試卷
你可能感興趣的試題
Given this fragment in a servlet：
23.if（req.isUserInRole（"Admin"）） {
24.// do stuff
25.}
And the following fragment from the related Java EE deployment descriptor：
812.<security-role-ref>
813.<role-name>Admin</role-name>
814.<role-link>Administrator</role-link>
815.</security-role-ref>
900.<security-role>
901.<role-name>Admin</role-name>
902.<role-name>Administrator</role-name>
903.</security-role>
What is the result？（）
A.Line 24 can never be reached.
B.The deployment descriptor is NOT valid.
C.If line 24 executes， the user’s role will be Admin.
D.If line 24 executes， the user’s role will be Administrator.
E.If line 24 executes the user’s role will NOT be predictable.
If you want to use the Java EE platform’s built-in type of authentication that uses a custom HTML page for authentication.
Which two statements are true？（）
A.Your deployment descriptor will need to contain this tag： CUSTOM.
B.The related custom HTML login page must be named loginPage.html.
C.When you use this type of authentication， SSL is turned on automatically.
D.You must have a tag in your deployment descriptor that allows you to point to both a login HTML pageand an HTML page for handling any login errors.
E.In the HTML related to authentication for this application， you must use predefined variable names fort he variables that store the user and password values.
Given：
3.class MyServlet extends HttpServlet {
4.public void doPut（HttpServletRequest req， HttpServletResponse resp） throws ServletException，IOException {
5.// servlet code here ...
26.}
27.}
If the DD contains a single security constraint associated with MyServlet and its only <http method> tagsand <auth-constraint> tags are：<http-method>GET</http-method><http-method>PUT</http-method>
<auth-constraint>Admin</auth-constraint>
Which four requests would be allowed by the container？（）
A.A user whose role is Admin can perform a PUT.
B.A user whose role is Admin can perform a GET.
C.A user whose role is Admin can perform a POST.
D.A user whose role is Member can perform a PUT.
E.A user whose role is Member can perform a POST.
F.A user whose role is Member can perform a GET.
A developer has used this code within a servlet：
62.if（request.isUserInRole（"vip"）） {
63.// VIP-related logic here
64.}
What else must the developer do to ensure that the intended security goal is achieved？（）
A.Create a user called vip in the security realm
B.Define a group within the security realm and call it vip
C.Define a security-role named vip in the deployment descriptor
D.Declare a security-role-ref for vip in the deployment descripto
A.Url
B.Link
C.Param
D.Import
E.Redirect
最新試題
You are building a dating web site. The client’s date of birth is collected along with lots of other information.The Person class has a derived method， getAge（）：int， which returns the person’s age calculated from thedate of birth and today’s date. In one of your JSPs you need to print a special message to clients within theage group of 25 through 35.Which two EL code snippets will return true for this condition？ （）
Your company has a corporate policy that prohibits storing a customer’s credit card number in anycorporate database. However， users have complained that they do NOT want to re- enter their credit cardnumber for each transaction. Your management has decided to use client-side cookies to record the user’scredit card number for 120 days. Furthermore， they also want to protect this information during transit fromthe web browser to the web container； so the cookie must only be transmitted over HTTPS.Which codesnippet creates the "creditCard" cookie and adds it to the out going response to be stored on the user’s webbrowser？（）
Click the ’Select and Place’ button.Place the events in the order they occur.
Which is true about the web container request processing model？（）
Given a web application in which the request parameter productID contains a product identifier.Which twoEL expressions evaluate the value of the productID？（）
Click the ’Select and Place’ button.Place the events in the order they occur.
Click the ’Select and Place’ button.Place the events in the order they occur.
You are building a web application with a scheduling component. On the JSP， you need to show the currentdate， the date of the previous week， and the date of the next week. To help you present this information，you have created the following EL functions in the ’d’ namespace： name： curDate； signature： java.util.DatecurrentDate（） name： addWeek； signature： java.util.Date addWeek（java.util.Date， int） name： dateString；signature：java.util.String getDateString（java.util.Date）Which EL code snippet will generate the string for the previousweek？
Click the ’Select and Place’ button.Place the events in the order they occur.
Click the ’Select and Place’ button.Place the events in the order they occur.