CSSLP · Question #129
The Web resource collection is a security constraint element summarized in the Java Servlet Specification v2.4. Which of the following elements does it include? Each correct answer represents a comple
The correct answer is A. HTTP methods D. URL patterns. In the Java Servlet Specification, a web resource collection within a security constraint defines which web resources are protected. This collection specifies both the HTTP methods and the URL patterns to which the security constraint applies.
Question
The Web resource collection is a security constraint element summarized in the Java Servlet Specification v2.4. Which of the following elements does it include? Each correct answer represents a complete solution. Choose two.
Options
- AHTTP methods
- BRole names
- CTransport guarantees
- DURL patterns
How the community answered
(30 responses)- A90% (27)
- B3% (1)
- C7% (2)
Why each option
In the Java Servlet Specification, a web resource collection within a security constraint defines which web resources are protected. This collection specifies both the HTTP methods and the URL patterns to which the security constraint applies.
HTTP methods (e.g., GET, POST, PUT) are specified within a web-resource-collection to define which specific operations on the URLs are subject to the security constraint.
Role names are part of the "auth-constraint" element, defining which roles are authorized to access the protected resource, not part of the web resource collection itself.
Transport guarantees (e.g., NONE, INTEGRAL, CONFIDENTIAL) are specified in the "user-data-constraint" element, determining the required communication integrity and confidentiality, not the web resource collection.
URL patterns are defined within a web-resource-collection to indicate the specific web resources (e.g., "/admin/*", "/data/secure.jsp") that the security constraint applies to.
Concept tested: Java Servlet security constraints
Source: https://download.oracle.com/otndocs/jcp/servlet-2.4-fr-spec-oth-JSpec/
Topics
Community Discussion
No community discussion yet for this question.