Oracle Oracle Certifications 1Z0-858 Questions & Answers

• Question 231:

  If you want to use the Java EE platform's built-in type of authentication that uses a custom HTML page for authentication, which two statements are true? (Choose two.)

  A. Your deployment descriptor will need to contain this tag:CUSTOM.

  B. The related custom HTML login page must be named loginPage.html.

  C. When you use this type of authentication, SSL is turned on automatically.

  D. You must have a tag in your deployment descriptor that allows you to point to both a login HTML page and an HTML page for handling any login errors.

  E. In the HTML related to authentication for this application, you must use predefined variable names for the variables that store the user and password values.

  Correct Answer: DE

• Question 232:

  Given this fragment in a servlet:

  23.

  if(req.isUserInRole("Admin")) {

  24.

  // do stuff

  25.

  }

  And the following fragment from the related Java EE deployment descriptor:

  812.

  813.

  Admin

  814.

  Administrator

  815.

  900.

  901.

  Admin

  902.

  Administrator

  903.

  What is the result?

  A. Line 24 can never be reached.

  B. The deployment descriptor is NOT valid.

  C. If line 24 executes, the user's role will be Admin.

  D. If line 24 executes, the user's role will be Administrator.

  E. If line 24 executes the user's role will NOT be predictable.

  Correct Answer: D

• Question 233:

  Given the security constraint in a DD:

  101.

  102.

  103.

  Foo

  104.

  /Bar/Baz/*

  105.

  POST

  106.

  107.

  108.

  DEVELOPER

  109.

  110.

  And given that "MANAGER" is a valid role-name, which four are true for this security constraint? (Choose four.)

  A. MANAGER can do a GET on resources in the /Bar/Baz directory.

  B. MANAGER can do a POST on any resource in the /Bar/Baz directory.

  C. MANAGER can do a TRACE on any resource in the /Bar/Baz directory.

  D. DEVELOPER can do a GET on resources in the /Bar/Baz directory.

  E. DEVELOPER can do only a POST on resources in the /Bar/Baz directory.

  F. DEVELOPER can do a TRACE on any resource in the /Bar/Baz directory.

  Correct Answer: ACDF

• Question 234:

  Which three are valid URL mappings to a servlet in a web deployment descriptor? (Choose three.)

  A. */*

  B. *.do

  C. MyServlet

  D. /MyServlet

  E. /MyServlet/*

  F. MyServlet/*.jsp

  Correct Answer: BDE

• Question 235:

  Which three web application deployment descriptor elements allow web components to gain references to resources or EJB components? (Choose three.)

  A. ejb-ref

  B. jdbc-ref

  C. servlet-ref

  D. resource-ref

  E. javamail-ref

  F. ejb-remote-ref

  G. resource-env-ref

  Correct Answer: ADG

• Question 236:

  Which three are true about TLD files? (Choose three.)

  A. The web container recognizes TLD files placed in any subdirectory of WEB-INF.

  B. When deployed inside a JAR file, TLD files must be in the META-INF directory, or a subdirectory of it.

  C. A tag handler's attribute must be included in the TLD file only if the attribute can accept request- time expressions.

  D. The web container can generate an implicit TLD file for a tag library comprised of both simple tag handlers and tag files.

  E. The web container can automatically extend the tag library map described in a web.xml file by including entries extracted from the web application's TLD files.

  Correct Answer: ABE

• Question 237:

  Which JSTL code snippet can be used to perform URL rewriting?

  A.

  B.

  C.

  D.

  Correct Answer: C

• Question 238:

  Assume the scoped attribute priority does NOT yet exist. Which two create and set a new request- scoped attribute priority to the value "medium"? (Choose two.)

  A. ${priority = 'medium'}

  B. ${requestScope['priority'] = 'medium'}

  C.

  D. medium

  E.

  F. medium

  G.

  Correct Answer: DE

• Question 239:

  You are creating a JSP page to display a collection of data. This data can be displayed in several different ways so the architect on your project decided to create a generic servlet that generates a comma-delimited string so that various pages can render the data in different ways. This servlet takes on request parameter: objectID. Assume that this servlet is mapped to the URL pattern: /WEB- INF/data.

  In the JSP you are creating, you need to split this string into its elements separated by commas and generate an HTML

  list from the data.

  Which JSTL code snippet will accomplish this goal?

  A.

  • $ {item}

  B.

  • $ {item}

  C.

  • $ {item}

  D.

  • $ {item}

  Correct Answer: D

  • Question 240:

    One of the use cases in your web application uses many session-scoped attributes. At the end of the use case, you want to clear out this set of attributes from the session object. Assume that this static variable holds this set of attribute names:

    201.

    private static final Set USE_CASE_ATTRS;

    202.

    static {

    203.

    USE_CASE_ATTRS.add("customerOID");

    204.

    USE_CASE_ATTRS.add("custMgrBean");

    205.

    USE_CASE_ATTRS.add("orderOID");

    206.

    USE_CASE_ATTRS.add("orderMgrBean");

    207.

    }

    Which code snippet deletes these attributes from the session object?

    A. session.removeAll(USE_CASE_ATTRS);

    B. for ( String attr : USE_CASE_ATTRS ) {session.remove(attr);}

    C. for ( String attr : USE_CASE_ATTRS ) {session.removeAttribute(attr);}

    D. for ( String attr : USE_CASE_ATTRS ) {session.deleteAttribute(attr);}

    E. session.deleteAllAttributes(USE_CASE_ATTRS);

    Correct Answer: C