Which two statements are true about the security-related tags in a valid Java EE deployment descriptor? (Choose two)

Question

Options

• AEvery <security-constraint> tag must have at least one <http-method> tag.
• BA <security-constraint> tag can have many <web-resource-collection> tags.
• CA given <auth-constraint> tag can apply to only one <web-resource-collection> tag.
• DA given <web-resource-collection> tag can contain from zero to many <url-pattern> tags.
• EIt is possible to construct a valid <security-constraint> tag such that, for a given resource

• A
  4% (1)
• B
  76% (19)
• C
  4% (1)
• D
  16% (4)

No community discussion yet for this question.