nerdexam
(ISC)2

CSSLP · Question #129

The Web resource collection is a security constraint element summarized in the Java Servlet Specification v2.4. Which of the following elements does it include? Each correct answer represents a comple

The correct answer is A. HTTP methods D. URL patterns. In the Java Servlet Specification, a web resource collection within a security constraint defines which web resources are protected. This collection specifies both the HTTP methods and the URL patterns to which the security constraint applies.

Secure Software Implementation

Question

The Web resource collection is a security constraint element summarized in the Java Servlet Specification v2.4. Which of the following elements does it include? Each correct answer represents a complete solution. Choose two.

Options

  • AHTTP methods
  • BRole names
  • CTransport guarantees
  • DURL patterns

How the community answered

(30 responses)
  • A
    90% (27)
  • B
    3% (1)
  • C
    7% (2)

Why each option

In the Java Servlet Specification, a web resource collection within a security constraint defines which web resources are protected. This collection specifies both the HTTP methods and the URL patterns to which the security constraint applies.

AHTTP methodsCorrect

HTTP methods (e.g., GET, POST, PUT) are specified within a web-resource-collection to define which specific operations on the URLs are subject to the security constraint.

BRole names

Role names are part of the "auth-constraint" element, defining which roles are authorized to access the protected resource, not part of the web resource collection itself.

CTransport guarantees

Transport guarantees (e.g., NONE, INTEGRAL, CONFIDENTIAL) are specified in the "user-data-constraint" element, determining the required communication integrity and confidentiality, not the web resource collection.

DURL patternsCorrect

URL patterns are defined within a web-resource-collection to indicate the specific web resources (e.g., "/admin/*", "/data/secure.jsp") that the security constraint applies to.

Concept tested: Java Servlet security constraints

Source: https://download.oracle.com/otndocs/jcp/servlet-2.4-fr-spec-oth-JSpec/

Topics

#Java Servlet Security#Web Security Constraints#web.xml#Resource Collection

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice