Oracle
1Z0-860 · Question #128
Bean Provider has been asked to write a stateless session bean, MyBean with a single method breakout. A System Administrator guarantees that all clients accessing the bean will be identified by…
The correct answer is B. Use the get Caller Principal method on an injected SessionContext to determine the required. See the full explanation below for the reasoning.
Question
Bean Provider has been asked to write a stateless session bean, MyBean with a single method breakout. A System Administrator guarantees that all clients accessing the bean will be identified by mutual SSL authentication. The Bean Provider's task is to ensure that breakout always logs identity information of the client that invoked it. Which solution would satisfy this requirement?
Options
- AAccess the identity information in the X.509 certificate used to authenticate the user from within
- BUse the get Caller Principal method on an injected SessionContext to determine the required
- CUse the is Caller ln Role method on an injected Session Context to determine the required information.
- DEnsure that the breakout method is appropriately annotated with @RolesAllowed.
How the community answered
(49 responses)- A4% (2)
- B82% (40)
- C12% (6)
- D2% (1)
Community Discussion
No community discussion yet for this question.