问题：多选题Given： 3.class MyServlet extends HttpServlet { 4.public void doPut（HttpServletRequest req， HttpServletResponse resp） throws ServletException，IOException { 5.// servlet code here ... 26.} 27.} If the DD contains a single security constraint associated with MyServlet and its only tagsand tags are：GETPUT Admin Which four requests would be allowed by the container？（）AA user whose role is Admin can perform a PUT.BA user whose role is Admin can perform a GET.CA user whose role is Admin can perform a POST.DA user whose role is Member can perform a PUT.EA user whose role is Member can perform a POST.FA user whose role is Member can perform a GET.
查看答案
问题：多选题If you want to use the Java EE platform’s built-in type of authentication that uses a custom HTML page for authentication. Which two statements are true？（）AYour deployment descriptor will need to contain this tag： CUSTOM.BThe related custom HTML login page must be named loginPage.html.CWhen you use this type of authentication， SSL is turned on automatically.DYou must have a tag in your deployment descriptor that allows you to point to both a login HTML pageand an HTML page for handling any login errors.EIn the HTML related to authentication for this application， you must use predefined variable names fort he variables that store the user and password values.
问题：多选题A web application allows the HTML title banner to be set using a servlet context initialization parametercalled titleStr. Which two properly set the title in this scenario？（）A<title>${titleStr}</title>B<title>${initParam.titleStr}</title>C<title>${params[0].titleStr}</title>D<title>${paramValues.titleStr}</title>E<title>${initParam[’titleStr’]}</title>
问题：多选题Given the two security constraints in a deployment descriptor： 101. 102. 103.SALES 104.SALES 105. 106. 107. 108. 109. 110. If the two security constraints have the same url-pattern and http-method which two inserted independentlyat line 109，will allow users with role names of either SALES or MARKETING to access this resource？（）A<auth-constraint/>B<auth-constraint><role-name>*</role-name></auth-constraint>C<auth-constraint><role-name>ANY</role-name></auth-constraint>D<auth-constraint><role-name>MARKETING</role-name></auth-constraint>
问题：单选题Your IT department is building a lightweight Front Controller servlet that invokes an application logic objectwith the interface： public interface ApplicationController {public String invoke（HttpServletRequest request）} The return value of this method indicates a symbolic name of the next view. From this name， the FrontController servlet looks up the JSP URL in a configuration table. This URL might be an absolute path or apath relative to the current request. Next， the Front Controller servlet must send the request to this JSP togenerate the view. Assume that the servlet variable request is assigned the current HttpServletRequestobject and the variable context is assigned the webapp’s ServletContext. Which code snippet of the FrontController servlet accomplishes this goal？（）A Dispatcher view=context.getDispatcher（viewURL）；view.forward Request（request， response）；B Dispatcher view=request.getDispatcher（viewURL）；view.forward Request（request， response）；C RequestDispatcher view. =context.getRequestDispatcher（viewURL）；view.forward（request，response）；D RequestDispatcher view=request.getRequestDispatcher（viewURL）；view.forward（request， response）；
问题：多选题Which two are characteristics of the Service Locator pattern？（）AIt encapsulates component lookup procedures.BIt increases source code duplication and decreases reuse.CIt improves client performance by caching context and factory objects.DIt degrades network performance due to increased access to distributed lookup services.
问题：多选题You need to store a floating point number，called Tsquare，in the session scope. Which two code snippetsallow you to retrieve this value？（）Afloat Tsquare = session.getFloatAttribute（Tsquare）；Bfloat Tsquare = （Float） session.getAttribute（Tsquare）；Cfloat Tsquare = （float） session.getNumericAttribute（Tsquare）；Dfloat Tsquare = （（Float） session.getAttribute.（Tsquare））.floatValue（）；Efloat Tsquare = （（Float） session.getFloatAttribute.（Tsquare））.floatValue；
问题：单选题Which ensures that a JSP response is of type "text/plain"？（）A <%@ page mimeType=text/plain %>B <%@ page contentType=text/plain %>C <%@ page pageEncoding=text/plain %>D <%@ page contentEncoding=text/plain %>E <% response.setEncoding（text/plain）； %>
问题：多选题Which two security mechanisms can be directed through a sub-element of the element in a web application deployment descriptor？（）AAuthorizationBData integrityCConfidentialityDAuthentication
问题：多选题Given： 11. 15. Which three EL expressions， inserted at line 15，are valid and evaluate to "3"？（）A${vals.2}B${vals[2]}C${vals.index}D${vals[index]}E${vals}[index]F${vals[vals[index-1]]}
问题：单选题You have a use case in your web application that adds several session-scoped attributes. At the end of theuse case， one of these objects， the manager attribute， is removed and then it needs to decide which of theother session-scoped attributes to remove. How can this goal be accomplished？（）A The object of the manager attribute should implement the HttpSessionBindingListener and it should call the removeAttribute method on the appropriate session attributes.B The object of the manager attribute should implement the HttpSessionListener and it should call the removeAttribute method on the appropriate session attributes.C The object of the manager attribute should implement the HttpSessionBindingListener and it should call the deleteAttribute method on the appropriate session attributes.D The object of the manager attribute should implement the HttpSessionListener and it should call the deleteAttribute method on the appropriate session attributes.
问题：多选题A session-scoped attribute is stored by a servlet， and then that servlet forwards to a JSP page. Which threejsp：useBean attributes must be used to access this attribute in the JSP page？（）AidBnameCbeanDtypeEscope
问题：单选题Assume a JavaBean com.example.GradedTestBean exists and has two attributes. The attribute name is oftype java.lang.String and the attribute score is of type java.lang.Integer. An array of com.example. GradedTestBean objects is exposed to the page in a request- scoped attribute called results. Additionally，an empty java.util.HashMap called resultMap is placed in the page scope. A JSP page needs to add the firstentry in results to resultMap， storing the name attribute of the bean as the key and the score attribute of thebean as the value. Which code snippet of JSTL code satisfies this requirement？（）A ${resultMap[results[0].name] = results[0].score}B <c：set var=${resultMap} key=${results[0].name} value=${results[0].score} />C <c：set var=resultMap property=${results[0].name}> ${results[0].value}</c：set>D <c：set var=resultMap property=${results[0].name} value=${results[0].score} />E <c：set target=${resultMap} property=${results[0].name} value=${results[0].score} />
问题：多选题Your web application uses a simple architecture in which servlets handle requests and then forward to aJSP using a request dispatcher. You need to pass information calculated in the servlet to the JSP for view generation.This information must NOT be accessible to any other servlet，JSP or session in the webapp. Which two techniques can you use to accomplish this goal？（）AAdd attributes to the session object.BAdd attributes on the request object.CAdd parameters to the request object.DUse the pageContext object to add request attributes.EAdd parameters to the JSP’s URL when generating the request dispatcher.
问题：单选题Which EL expression evaluates to the request URI？（）A ${requestURI}B ${request.URI}C ${request.getURI}D ${request.requestURI}E ${requestScope.requestURI}F ${pageContext.request.requestURI}
问题：单选题The Squeaky Bean company has decided to port their web application to a new J2EE 1.4 container. Whilereviewing the application， a developer realizes that in multiple places within the current application， nearlyduplicate code exists that finds enterprise beans. Which pattern should be used to eliminate this duplicatecode？（）A Transfer ObjectB Front ControllerC Service LocatorD Intercepting FilterE Business DelegateF Model-View-Controller
问题：单选题The JSP developer wants a comment to be visible in the final output to the browser. Which comment styleneeds to be used in a JSP page？（）A <!-- this is a comment -->B <% // this is a comment %>C <%-- this is a comment --%>D <% /** this is a comment **/ %>
问题：单选题Given a Filter class definition with this method： 21.public void doFilter（ServletRequest request， 22.ServletResponse response， 23.FilterChain chain） 24.throws ServletException， IOException { 25.// insert code here26. } Which should you insert at line 25 to properly invoke the next filter in the chain，or the target servlet if thereare no more filters？（）A chain.forward（request， response）；B chain.doFilter（request， response）；C request.forward（request， response）；D request.doFilter（request， response）；
问题：单选题You have a new IT manager that has mandated that all JSPs must be refactored to include no scritpletcode. The IT manager has asked you to enforce this. Which deployment descriptor element will satisfy thisconstraint？（）A <jsp-property-group>. <url-pattern>*.jsp</url-pattern>. <permit-scripting>false</permit-scripting>. </jsp-property-group>B <jsp-config>. <url-pattern>*.jsp</url-pattern><permit-scripting>false</permit-scripting>. </jsp-config>C <jsp-config>. <url-pattern>*.jsp</url-pattern>. <scripting-invalid>true</scripting-invalid>. </jsp-config>D <jsp-property-group>. <url-pattern>*.jsp</url-pattern>. <scripting-invalid>true</scripting-invalid>. </jsp-property-group>
