单项选择题 Given this fragment from a Java EE deployment descriptor： 124. <welcome-file>beta.html</welcome-file> 125. <welcome-file>alpha.html</welcome-file> And this request from a browser：http：//www.sun.com/SCWCDtestApp/register Which statement is correct，when the container receives this request？（）

多项选择题 WhichtwoaboutWARfilesaretrue？（）

多项选择题 Given that www.example.com/SCWCDtestApp is a validly deployed Java EE web application and that all ofthe JSP files specified in the requests below exist in the locations specified. Which two requests，issuedfrom a browser，will return an HTTP 404 error？（）

多项选择题 WhichtwoactionsprotectaresourcefilefromdirectHTTPaccesswithinawebapplication？（）

单项选择题 After a merger with another small business， your company has inherited a legacy WAR file but the originalsource files were lost. After reading the documentation of that web application，you discover that the WARfile contains a useful tag library that you want to reuse in your own webapp packaged as a WAR file. What do you need to do to reuse this tag library？（）

多项选择题 WhichthreewebapplicationdeploymentdescriptorelementsallowwebcomponentstogainreferencestoresourcesorEJBcomponents？（）

多项选择题 WhichthreearevalidURLmappingstoaservletinawebdeploymentdescriptor？（）

多项选择题 Given the security constraint in a DD： 101.<security-constraint> 102.<web-resource-collection> 103.<web-resource-name>Foo</web-resource-name> 104.<url-pattern>/Bar/Baz/*</url-pattern> 105.<http-method>POST</http-method> 106.</web-resource-collection> 107.<auth-constraint> 108.<role-name>DEVELOPER</role-name> 109.</auth-constraint> 110.</security-constraint> And given that "MANAGER" is a valid role-name，which four are true for this security constraint？（）

单项选择题 Given this fragment in a servlet： 23.if（req.isUserInRole（"Admin"）） { 24.// do stuff 25.} And the following fragment from the related Java EE deployment descriptor： 812.<security-role-ref> 813.<role-name>Admin</role-name> 814.<role-link>Administrator</role-link> 815.</security-role-ref> 900.<security-role> 901.<role-name>Admin</role-name> 902.<role-name>Administrator</role-name> 903.</security-role> What is the result？（）

多项选择题 If you want to use the Java EE platform’s built-in type of authentication that uses a custom HTML page for authentication. Which two statements are true？（）

多项选择题 Given： 3.class MyServlet extends HttpServlet { 4.public void doPut（HttpServletRequest req， HttpServletResponse resp） throws ServletException，IOException { 5.// servlet code here ... 26.} 27.} If the DD contains a single security constraint associated with MyServlet and its only <http method> tagsand <auth-constraint> tags are：<http-method>GET</http-method><http-method>PUT</http-method> <auth-constraint>Admin</auth-constraint> Which four requests would be allowed by the container？（）

单项选择题 A developer has used this code within a servlet： 62.if（request.isUserInRole（"vip"）） { 63.// VIP-related logic here 64.} What else must the developer do to ensure that the intended security goal is achieved？（）

多项选择题 WhichtwoJSTLURL-relatedtagsperformURLrewriting？（）

单项选择题 Your management has required that all JSPs be created to generate XHTML-compliant content and tofacilitate that decision， you are required to create all JSPs using the JSP Document format. In the reviewOrder.jspx page， you need to use several core JSTL tags to process the collection of order items inthe customer’s shopping cart. Which JSP code snippets must you use in the reviewOrder.jspx page？（）

单项选择题 You are creating a JSP page to display a collection of data. This data can be displayed in several differentways so the architect on your project decided to create a generic servlet that generates a comma-delimitedstring so that various pages can render the data in different ways. This servlet takes on request parameter:objectID. Assume that this servlet is mapped to the URL pattern:/WEB-INF/data. In the JSP you are creating, you need to split this string into its elements separated by commas andgenerate an HTML list from the data. Which JSTL code snippet will accomplish this goal?（）

多项选择题 Assume the scoped attribute priority does NOT yet exist. Which two create and set a new request-scopedattribute priority to the value "medium"？（）

单项选择题 WhichJSTLcodesnippetcanbeusedtoperformURLrewriting？（）

单项选择题 Assume that a news tag library contains the tags lookup and item： lookup Retrieves the latest news headlines and executes the tag body once for each headline. Exposes a NESTED page scoped attributecalled headline of type com.example.Headline containing details for that headline. item Outputs the HTMLfor a single news headline. Accepts an attribute info of typecom.example.Headline containing details for theheadline to be rendered. Which snippet of JSP code returns the latest news headlines in an HTML table，one per row？（）

单项选择题 One of the use cases in your web application uses many session-scoped attributes. At the end of the usecase， you want to clear out this set of attributes from the session object. Assume that this static variableholds this set of attribute names： 201.private static final Set<String> USE_CASE_ATTRS；  202.static { 203.USE_CASE_ATTRS.add（"customerOID"）； 204.USE_CASE_ATTRS.add（"custMgrBean"）； 205.USE_CASE_ATTRS.add（"orderOID"）； 206.USE_CASE_ATTRS.add（"orderMgrBean"）； 207.} Which code snippet deletes these attributes from the session object？（）

单项选择题 Whichstatementistrueaboutwebcontainersessionmanagement？（）