5 Given a war file with the following structure 

where wf.jar contains a valid web-fragment.xml and the class MyServlet.class. 

The following is a snippet of web.xml The following is a snippet of web-fragment.xml 

The following is code snippet of MyServlet: 

What is the value of x inside doGet method of MyServlet?
(A) 1
(B) 0
(C) -1
(D) -2
(E) -3

1 A web application uses a cookies to track a client as it navigates through the pages that constitutes the application. Which code snippet can be used by the web application to reduce the chance of a cross-site scripting attack by setting some property of the cookie before returning it to the client? (A) cookie.setHttpOnly(true) (B) cookie.setMaxAge(3600) (C) cookie.setPath("/") (D) cookie.setSecure(true)

2 Which EL expression returns true if no session has been established with current client? (A) ${not(pageContext.session)} (B) ${not(requestScope.session)} (C) ${requestScope.sessions.this} (D) ${sessionScope.empty}

3 A Client wants to retrieve a representation of a resource, e.g. an XML document, localized according to the preferences of the user. Each user is allowed to specify one or more languages, in order of preference. Such preferences are application independent. How can the Client send language preference Information to the Server using a standard HTTP facility? (A) In the request body (B) In a request header (C) In the request line (D) In the request URL

4 During initialization, a servlet finds that the database connection it requires is unavailable. As the system designer, you know that the database start up completes several minutes after the webcontainer initializes the servlet. How should this be handled? (A) Retry the connection until it is successful, then allow the init() method to complete. (B) Throw a ServletException (C) Throw the IOException (D) Throw an UnavailableException

6 Which JSP standard action can be used to import content from a resource called foo.jsp? (A) ＜jsp:import file='foo.jsp' /＞ (B) ＜jsp:import page='foo.jsp' /＞ (C) ＜jsp:include page='foo.jsp' /＞ (D) ＜jsp:include file='foo.jsp' /＞ (E) ＜jsp:import＞foo.jsp＜/jsp:import＞ (F) ＜jsp:include＞foo.jsp＜/jsp:include＞

複選題7 Which two actions protect a resource file from direct HTTP access within a web application? (Choose two) (A) placing it in the /secure directory (B) placing it in the /WEB-INF directory (C) placing it in the /META-INF/secure directory (D) creating a ＜web-resource＞ element within the deployment descriptor (E) creating a ＜secure-resource＞ element within the deployment descriptor

8 In order to handle time outs and errors in an asynchronous application, a web application must implement which of the following interfaces? (A) ServletContextListener (B) ServletContextAttributeListener (C) HttpSessionListener (D) AsyncListener (E) HttpSessionAttributeListener (F) AsyncContextListener

9 Which three are true about the HttpServletRequestWrapper class? (Choose three.) (A) The HttpServletRequestWrapper is an example of the Decorator pattern. (B) The HttpServletRequestWrapper can be used to extend the functionality of a servlet request. (C) A subclass of HttpServletRequestWrapper CANNOT modify the behavior of the getReader method. (D) An HttpServletRequestWrapper may be used only by a class implement the javax.servlet.Filter interface. (E) An HttpServletRequestWrapper CANNOT be used on the request passed to the RequestDispatcher.interface. (F) An HttpServletRequestWrapper may modify the header of a request within an object implementing the javax.servlet.Filter interface.

10 Which is a benefit of precompiling a JSP page? (A) It avoids initialization on the first request. (B) It provides the ability to debug runtime errors in the application. (C) It provides better performance on the first request for the JSP page. (D) It avoids execution of the _jspService method on the first request.

11 Which java code snippet roles "MANAGER" and "EMPLOYEE" in a given application? (A) @DeclareRoles({ "MANAGER", "EMPLOYEE" })public class MyServlet extends HttpServlet {} (B) @SecurityRoles({ "MANAGER", "EMPLOYEE" })public class MyServlet extends HttpServlet {} (C) @DeclareRoles("MANAGER")@DeclareRoles("EMPLOYEE")public class MyServlet extends HttpServlet {} (D) @DeclareRole("MANAGER")@DeclareRole("EMPLOYEE")public class MyServlet extends HttpServlet {}