Oracle Oracle Certifications 1Z0-807 Questions & Answers

• Question 61:

  Which two actions limit the consequences of a network based attack?

  A. Implementing the principle of least privilege

  B. Installing a firewall at the outer boundary of your systems

  C. Placing Internet-accessible servers in a demilitarized zone

  D. Deploying a single sign-on system to provide system-wide authorization

  E. Allowing application servers privileged access to all databases

  Correct Answer: BE

• Question 62:

  You are implementing an online music that will store and play a user's collection of songs. You want users to rate their songs and view the top songs from friends. All queries must complete in four seconds or less.

  Which approach would meet the response time requirement with minimal overhead?

  A. Java class that uses JDBC with embedded SQL

  B. Java class that uses an optimized stored procedure

  C. JPA entity class with a lazy fetching strategy

  D. JPA entity class with an eager fetching strategy

  Correct Answer: B

• Question 63:

  You are the architect of a JEE-based product that customers can configure to meet their own security requirements. You want to enforce basic without sacrificing customers ability to customize the product.

  Which is the best method to support both requirements?

  A. Define base roles and users declaratively

  B. Define base roles and users programmatically

  C. Build a custom security service to handle authorization

  D. Customize the JRE sandbox model by using local variables

  Correct Answer: C

• Question 64:

  A company must honor a service-level agreement (SLA) for its application, which states all database requests must execute within three seconds.

  100% Real QandAs | 100% Real Pass

  Users complain that some requests take longer than five seconds to complete. You have been contracted to fix the problem.

  Which course of action do you recommend?

  A. Modify the program to implement multi threading and an event-driven design.

  B. Add servers to distribute the load.

  C. Upgrade the application server and the operating system.

  D. Define a plan for isolating the bottleneck, and define indicators that will measure performance under a test load.

  Correct Answer: D

• Question 65:

  Your CMC wants to move several web based search applications to an AJAX model, hoping to improve user engagement with a browser experience that feels smaller and more responsive.

  Which identifies a drawback to consider when adopting an AJAX model to improve user experience?

  A. Maintaining current performance could require more hardware.

  B. Maintaining accessibility across clients may require more development.

  C. Maintaining security within the page could be more difficult.

  D. Maintaining page navigability for users would have to be re-evaluated.

  E. Maintaining a scalable system could require redesigning applications.

  Correct Answer: C

• Question 66:

  A company is extending is successful social networking site to support the following channels:

  instant messaging (IM), email messaging and text messaging/SMS. At present, the site has scaled 400% in one year using a standard MVC Web framework the application experiences large surges or spikes in demand and also periods of

  inactivity. Notification delivery to the three channels does not need to be guaranteed.

  Which solutions extends the current architecture and best meets the company's requirements?

  A. Send the notification inline, that is, within the normal HTTP request-response cycle.

  B. Place messaging on a Java messaging Service (JMS) queue and use message-driven beans (MDBs) to create and send notifications.

  C. Insert the messages into a database and use plain old Java Objects (POJOs) to read the messaging using JDBC and send notifications.

  D. Insert the messages into a database and use entity beans to read the messages using JDBC and send notifications.

  Correct Answer: B

• Question 67:

  A manufacturing company has a large investment in a legacy Inventory Management System (IMS) developed with third-party technologies. You have been asked to design a Java EE application that interacts with it.

  You would like to ensure the following:

  Minimal application code is required to parse the communication messages.

  Communication is asynchronous and stateless.

  Performance import of the existing system is minimal.

  100% Real QandAs | 100% Real Pass

  Which two technologies combined would meet these requirements?

  A. XML

  B. JSON

  C. RMI

  D. JAX-RS

  E. JAX-WS

  Correct Answer: BD

• Question 68:

  Which is an objective of the Strategy pattern?

  A. To provide a way to configure a class with one of many behaviors

  B. To define an object that encapsulates how a set of objects interacts

  C. To define the skeleton of an algorithm, deferring some steps to subclasses

  D. To decouple an abstraction horn its implementation so that the two can vary independently

  E. To define a family of algorithms, encapsulate each one, and make them interchangeable

  F. To allow subclasses to redefine certain steps of an algorithm without changing the algorithm's structure

  Correct Answer: A

• Question 69:

  You need to restrict access to the administration screens in your website. Which two techniques test a user's permissions before granting access to a particular screen?

  A. Enterprise JavaBeans (EJB) entity

  B. Servlet filter

  C. Custom tag library

  D. Deployment descriptor

  E. Custom JavaScript in JSP

  Correct Answer: BD

• Question 70:

  Which two statements describe the contact between an Enterprise JavaBeans (EJB) container and the EJBs that it hosts?

  A. The container provides automatic logging of all exceptions and errors generated by EJB code.

  B. The container provides a transparent scaling mechanism to handle spikes in demand.

  C. An EJB can extend its services, such as security, to improve performance.

  D. The container has a well defined lifecycle model for each EJB type.

  Correct Answer: BD