What is true about Java EE authentication mechanisms?

A. If your deployment descriptor correctly declares an authentication type of CLIENT_CERT, your users must have a certificate from an official source before they can use your application.

B. If your deployment descriptor correctly declares an authentication type of BASIC, the container automatically requests a user name and password whenever a user starts a new session.

C. If you want your web application to support the widest possible array of browsers, and you want to perform authentication, the best choice of Java EE authentication mechanisms is DIGEST.

D. To use Java EE FORM authentication, you must declare two HTML files in your deployment descriptor, and you must use a predefined action in the HTML file that handles your user's login.

A web application contains a tag file called beta.tag in /WEB-INF/tags/alpha. A JSP page called sort.jsp exists in the web application and contains only this JSP code:

1.

<%@ taglib prefix="x"

2.

tagdir="/WEB-INF/tags/alpha" %>

3.

The sort.jsp page is requested.

Which two are true? (Choose two.)

A. Tag files can only be accessed using a tagdir attribute.

B. The sort.jsp page translates successfully and invokes the tag defined by beta.tag.

C. The sort.jsp page produces a translation error because a taglib directive must always have a uri attribute.

D. Tag files can only be placed in /WEB-INF/tags, and NOT in any subdirectories of /WEB-INF/tags.

E. The tagdir attribute in line 2 can be replaced by a uri attribute if a TLD referring to beta.tag is created and added to the web application.

F. The sort.jsp page produces a translation error because the tagdir attribute on lines 1-2 specifies a directory other than /WEB-INF/tags, which is illegal.

You have built a web application that you license to small businesses. The webapp uses a context parameter, called licenseExtension, which enables certain advanced features based on your client's license package. When a client pays for a specific service, you provide them with a license extension key that they insert into the of the deployment descriptor. Not every client will have this context parameter so you need to create a context listener to set up a default value in the licenseExtension parameter. Which code snippet will accomplish this goal?

A. You cannot do this because context parameters CANNOT be altered programmatically.

B. String ext = context.getParameter('licenseExtension');if ( ext == null ) {context.setParameter ('licenseExtension', DEFAULT);}

C. String ext = context.getAttribute('licenseExtension');if ( ext == null ) {context.setAttribute ('licenseExtension', DEFAULT);}

D. String ext = context.getInitParameter('licenseExtension');if ( ext == null ) {context.resetInitParameter ('licenseExtension', DEFAULT);}

E. String ext = context.getInitParameter('licenseExtension');if ( ext == null ) {context.setInitParameter ('licenseExtension', DEFAULT);}

Which three are described in the standard web application deployment descriptor? (Choose three.)

A. session configuration

B. MIME type mappings

C. context root for the application

D. servlet instance pool configuration

E. web container default port bindings

F. ServletContext initialization parameters

Given:

3.

public class MyTagHandler extends TagSupport {

4.

public int doStartTag() {

5.

// insert code here

6.

// return an int

7.

}

8.

// more code here ...

18. }

There is a single attribute foo in the session scope.

Which three code fragments, inserted independently at line 5, return the value of the attribute? (Choose three.)

A. Object o = pageContext.getAttribute("foo");

B. Object o = pageContext.findAttribute("foo");

C. Object o = pageContext.getAttribute("foo",PageContext.SESSION_SCOPE);

D. HttpSession s = pageContext.getSession();Object o = s.getAttribute("foo");

E. HttpServletRequest r = pageContext.getRequest();Object o = r.getAttribute("foo");