GSSP-JAVA · Question #122
Mark works as a Programmer for InfoTech Inc. He develops an application named AccountServlet. He wants to ensure that no body can access his application, i.e., he does not want any role to have…
The correct answer is A. <auth-constraint/>. See the full explanation below for the reasoning.
Question
Mark works as a Programmer for InfoTech Inc. He develops an application named AccountServlet. He wants to ensure that no body can access his application, i.e., he does not want any role to have access on his application. He defines the following security constraint for his application. <security-constraint> <web-resource-collection> <web-resource-name>AccountServlet</web-resource-name> <url-pattern>/acme/Account</url-pattern> <http-method>GET</http-method> <http-method>PUT</http-method> </web-resource-collection> //code </security-constraint> Which of the following options will be used to secure his application?
Options
- A<auth-constraint/>
- BSkip the <auth-constraint> element in the security constraint code.
- C<auth-constraint>
- D<auth-constraint>
How the community answered
(23 responses)- A78% (18)
- B4% (1)
- C13% (3)
- D4% (1)
Community Discussion
No community discussion yet for this question.