nerdexam
GIAC

GSSP-JAVA · Question #122

Mark works as a Programmer for InfoTech Inc. He develops an application named AccountServlet. He wants to ensure that no body can access his application, i.e., he does not want any role to have…

The correct answer is A. <auth-constraint/>. See the full explanation below for the reasoning.

Question

Mark works as a Programmer for InfoTech Inc. He develops an application named AccountServlet. He wants to ensure that no body can access his application, i.e., he does not want any role to have access on his application. He defines the following security constraint for his application. <security-constraint> <web-resource-collection> <web-resource-name>AccountServlet</web-resource-name> <url-pattern>/acme/Account</url-pattern> <http-method>GET</http-method> <http-method>PUT</http-method> </web-resource-collection> //code </security-constraint> Which of the following options will be used to secure his application?

Options

  • A<auth-constraint/>
  • BSkip the <auth-constraint> element in the security constraint code.
  • C<auth-constraint>
  • D<auth-constraint>

How the community answered

(23 responses)
  • A
    78% (18)
  • B
    4% (1)
  • C
    13% (3)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Full GSSP-JAVA Practice