单选题Which method must be used to encode a URL passed as an argument to HttpServletResponse.sendRedirect when using URL rewriting for session tracking？（）A ServletResponse.encodeURLB HttpServletResponse.encodeURLC ServletResponse.encodeRedirectURLD HttpServl

第1题：

Your web application requires the adding and deleting of many session attributes during a complex usecase. A bug report has come in that indicates that an important session attribute is being deleted too soonand a NullPointerException is being thrown several interactions after the fact. You have decided to create asession event listener that will log when attributes are being deleted so you can track down when theattribute is erroneously being deleted. Which listener class will accomplish this debugging goal？（）

• A、Create an HttpSessionAttributeListener class and implement the attributeDeleted method and log the attribute name using the getName method on the event object.
• B、Create an HttpSessionAttributeListener class and implement the attributeRemoved method and log the attribute name using the getName method on the event object.
• C、Create an SessionAttributeListener class and implement the attributeRemoved method and log the attribute name using the getAttributeName method on the event object.
• D、Create an SessionAttributeListener class and implement the attributeDeleted method and log the attribute name using the getAttributeName method on the event object.

第2题：

Which the JSTL code snippet can be used to import content from another web resource？（）

• A、 <c：import url=*foo.jsp”/> 
• B、 <c：import page=*foo.jsp”/> 
• C、 <c：include url=*foo.jsp”/> 
• D、 <c：include page=*foo.jsp”/> 
• E、 Importing cannot be done in JSTL. A standard action must be used instead.

第3题：

第4题：

Which two JSTL URL-related tags perform URL rewriting？（）

• A、Url
• B、Link
• C、Param
• D、Import
• E、Redirect

第5题：

A developer for the Company.com web site has been told that users may turn off cookie support in their browsers. What must the developer do to ensure that these customers can still use the web application？（）  

• A、 The developer must ensure that every URL is properly encoded using the appropriate URL rewriting APIs
• B、 The developer must provide an alternate mechanism for managing sessions and abandon theHttpSession mechanism entirely
• C、 The developer can ignore this issue. Web containers are required to support automatic URL rewriting when cookies are not supported
• D、 The developer must ass the string ？id= to the end of every URL to ensure that the conversion with the browser can continue.

第6题：

Which JSTL code snippet can be used to perform URL rewriting？（）

• A、<a href=’<c：url url="foo.jsp"/>’ />
• B、<a href=’<c：link url="foo.jsp"/>’ />
• C、<a href=’<c：url value="foo.jsp"/>’ />
• D、<a href=’<c：link value="foo.jsp"/>’ />

第7题：

Which method must be used to encode a URL passed as an argument to HttpServletResponse.sendRedirect when using URL rewriting for session tracking？（）

• A、ServletResponse.encodeURL
• B、HttpServletResponse.encodeURL
• C、ServletResponse.encodeRedirectURL
• D、HttpServletResponse.encodeRedirectURL

第8题：

Which method should be used to dynamically elect an RP when your network is using PIM version1?（）

• A、auto-RP
• B、static RP
• C、discovery mode
• D、bootstrap protocol

第9题：

Your web application uses a simple architecture in which servlets handle requests and then forward to aJSP using a request dispatcher. You need to pass information calculated in the servlet to the JSP for view generation.This information must NOT be accessible to any other servlet，JSP or session in the webapp. Which two techniques can you use to accomplish this goal？（）

• A、Add attributes to the session object.
• B、Add attributes on the request object.
• C、Add parameters to the request object.
• D、Use the pageContext object to add request attributes.
• E、Add parameters to the JSP’s URL when generating the request dispatcher.

第10题：

Which two statements are true about using the isUserInRole method to implement security in a Java EEapplication？（）

• A、It can be invoked only from the doGet or doPost methods.
• B、It can be used independently of the getRemoteUser method.
• C、Can return "true" even when its argument is NOT defined as a valid role name in the deployment descriptor.
• D、Using the isUserInRole method overrides any declarative authentication related to the method in which it is invoked.