A.Form-based logins should NOT be used with HTTPS.
B.When using Basic Authentication the target server is NOT authenticated.
C.J2EE compliant web containers are NOT required to support the HTTPS protocol.
D.Web containers are required to support unauthenticated access to unprotected web resources.
您可能感興趣的試卷
你可能感興趣的試題
Given the two security constraints in a deployment descriptor：
101.<security-constraint>
102.<!--a correct url-pattern and http-method goes here-->
103.<auth-constraint><role-name>SALES</role-name></auth- . <auth-constraint>
104.<role-name>SALES</role-name>
105.</auth-constraint>
106.</security-constraint>
107.<security-constraint>
108.<!--a correct url-pattern and http-method goes here-->
109.<!-- Insert an auth-constraint here -->
110.</security-constraint>
If the two security constraints have the same url-pattern and http-method
which two inserted independentlyat line 109，will allow users with role names of either SALES or MARKETING to access this resource？（）
A.<auth-constraint/>
B.<auth-constraint><role-name>*</role-name></auth-constraint>
C.<auth-constraint><role-name>ANY</role-name></auth-constraint>
D.<auth-constraint><role-name>MARKETING</role-name></auth-constraint>
A.HTTP Basic Authentication
B.Form Based Authentication
C.HTTP Digest Authentication
D.HTTPS Client Authentication
A.Using HTTPS as a protocol
B.Using an LDAP security realm
C.Using HTTP Basic authentication
D.Using forms-based authentication
A.javax.servlet.http.HttpServletRequest
B.javax.servlet.http.HttpSessionContext
C.javax.servlet.http.HttpServletResponse
D.javax.servlet.http.HttpSessionBindingEvent
E.javax.servlet.http.HttpSessionAttributeEvent
Users of your web application have requested that they should be able to set the duration of their sessions.So for example， one user might want a webapp to stay connected for an hour rather than the webapp’sdefault of fifteen minutes； another user might want to stay connected for a whole day. Furthermore， youhave a special login servlet that performs user authentication and retrieves the User object from the database. You want to augment this code to set up the user’s specified session duration.
Which codesnippet in the login servlet will accomplish this goal？（）
A.User user = // retrieve the User object from the database session.setDurationInterval（user.getSessionDuration（））；
B.User user = // retrieve the User object from the database session.setMaxDuration（user.getSessionDuration（））；
C.User user = // retrieve the User object from the database session.setInactiveInterval（user.getSessionDuration（））；
D.User user=//retrieve the User object from the database session.setDuration（user.getSessionDuratio（））；
E.User user = // retrieve the User object from the database session.setMaxInactiveInterval（user.getSessionDuration（））；
最新試題
Which element of a web application deployment descriptor element is required？（）
The JSP developer wants a comment to be visible in the final output to the browser.Which comment styleneeds to be used in a JSP page？（）
A web browser need NOT always perform a complete request for a particular page that it suspects mightNOT have changed. The HTTP specification provides a mechanism for the browser to retrieve only a partialresponse from the web server； this response includes information， such as the Last-Modified date but NOTthe body of the page.Which HTTP method will the browser use to retrieve such a partial response？（）
Given tutorial.jsp：2.EL Tutorial3.Example 14.5.Dear ${my：nickname（user）}6.Which， when added to the web application deployment descriptor，ensures that line 5 is included verbatimin the JSP output？（）
Click the ’Select and Place’ button.Place the events in the order they occur.
Which two are valid and equivalent？（）
Which is a benefit of precompiling a JSP page？（）
In which three directories， relative to a web application’s root， may a tag library descriptor file reside whendeployed directly into a web application？（）
Click the 'Select and Place' button.Place the events in the order they occur.
Which ensures that a JSP response is of type "text/plain"？（）