Your CMC wants to move several web based search applications to an AJAX model, hoping to improve user engagement with a browser experience that feels smaller and more responsive.

Which identifies a drawback to consider when adopting an AJAX model to improve user experience?

A. Maintaining current performance could require more hardware.

B. Maintaining accessibility across clients may require more development.

C. Maintaining security within the page could be more difficult.

D. Maintaining page navigability for users would have to be re-evaluated.

E. Maintaining a scalable system could require redesigning applications.

Your company is considering migrating a persistence module, originally implemented as CMP entity beans, to now use JPA.

Which two statements are true?

A. Each CMP entity bean can be mapped to a single JPA entity class.

B. The client code that accesses the CMP entity beans does not have to change.

C. IPA cannot capture all the kinds of relationships supported by CMP entity beans.

D. The resulting IPA persistence module can be used on both the client and the server.

E. The JNDI name of a JPA entity class can be customized to match that of the corresponding CMP entity bean.

F. Remote clients of the CMP entity beans must start using web services to access the JPA entity classes on the server.

Which two security threats are negated by encrypting network transactions with Transport Layer Security (TLS)?

A. SQL injection

B. Session hijacking

C. Man in the middle

D. Cross-site scripting

E. Denial of service

During a security audit, it is noted that your application is vulnerable to SQL Injection attacks.

100% Real QandAs | 100% Real Pass

Which two action would you perform to address this vulnerability?

A. Use parameterized stored procedures with the embedded parameters.

B. Add a text input validation filter to check user-supplied data.

C. Configure user permissions in the deployment descriptor.

D. Configure security roles in the deployment descriptor.

E. Deploy the Internet facing nodes in a well defined demilitarized zone (DMZ) layer.

F. Use parameterized stored procedures with the principle of least privilege.

YourDocs is an application that retrieves PDF documents of selected topics from both trusted and untrusted websites. It has been developed using a non-Java technology. You are designing your Mlearn, a mobile-based e-learning application, which will be implemented in Java. You plan to integrate YourDocs with your application.

Which web service technology would you choose to Integrate YourDocs into the YourMLearn application?

A. JAX-WS

B. JAX-WS with REST

C. JAX-RPC

D. JAX-RS