The <security-role-ref> element is used to specify the declaration of a security role reference in the web application’s code. The declaration of the element consists of the following elements:

1. <description>:It is an optional element that specifies the information about the reference.
2. <role-name>:It is used to specify the security role name used in the code.
3. <role-link>: It specifies the value of the name of the security role that the user may be mapped into. This element is used to link a security role reference to a defined security role. This element must contain the name of one of the security roles defined in the security-role elements.

<security-constraint>
 <web-resource-collection>
    <web-resource-name>AccountServlet</web-resource-name>
    <description>This is an Account Servlet.</description>
    <http-method>GET</http-method>
    <http-method>POST</http-method>
    <http-method>PUT</http-method>
    <http-method>DELETE</http-method>
    <url-pattern>acme/AccountServlet</url-pattern>
 </web-resource-collection>
</security-constraint>

It is not possible to define more than two http method in the web-resource-collection element.
B: The delete http method is not allowed in the http-method element declaration.
C: It is necessary that the web-resource-name must be specified in the web-resource-collection element.
D: It is necessary that the web-resource-name must be specified in the url of the url-pattern element.
E: If no http-method is specified in the web-resource-collection element, the security restriction will be applied to all http methods.
F: There should be at-least one url-pattern element otherwise, the will be ignored.

Explanation: Answer options C, E, and F are correct.

If no http-method is specified in the web-resource-collection element, the security restriction will be applied to all http methods. There should be at-least one url-pattern element otherwise, the <web-resource-collection> will be ignored.

The valid parameters and return types for the Web service methods are as follows:

1. All primitive types
2. All wrapper types
3. java.lang.BigDecimal and java.lang.BigInteger
4. java.lang.Calendar
5. java.lang.Date

The doTrace() method allows a servlet to handle a TRACE request. It is called by the server via the service method. If the headers sent with the TRACE request, a TRACE is always returned to the client, so that they can be used in debugging. There’s no need to override this method. The following is the general format of the doTrace() method:

protected void doTrace(HttpServletRequest rq1, HttpServletResponse rsp1) throws ServletException, java.io.IOException

Here the parameter, rq1 is the HttpServletRequest object that contains the request the client made to the servlet. The parameter rsp1 is the HttpServletResponse object that contains the response the servlet returns to the client. This method will throw java.io.IOException if an input or output error occurs while the servlet is handling the TRACE request. If the request for the TRACE cannot be handled, it will throw the ServletException exception.

The doOptions() method is called by the server via the service method. It allows a servlet to handle a OPTIONS request. The OPTIONS request determines which HTTP methods the server supports and returns an appropriate header. The following is the general form of this method:

protected void doOptions(HttpServletRequest rq1, HttpServletResponse rsp1)
throws ServletException, java.io.IOException

Here, the parameter rq1 is the HttpServletRequest object that contains the request the client made of the servlet. The rsp1 is the HttpServletResponse object that contains the response the servlet returns to the client. If an input or output error occurs while the servlet is handling the OPTIONS request, it throws java.io.IOException. If the request for the OPTIONS cannot be handled, the ServletException exception is thrown.

The getLastModified() method is used to return the time the HttpServletRequest object was last modified, in milliseconds since midnight January 1, 1970 GMT. This method returns a negative number if the time is unknown. This method will be overriden by those Servlets that support HTTP GET requests and can quickly determine their last modification time. This method allows the browser and proxy caches work more effectively, reducing the load on server and network resources. The following is the general form of the method:

protected long getLastModified(HttpServletRequest rq1)

Here, the parameter rq1 is the HttpServletRequest object that is sent to the servlet. This method returns a long integer specifying the time the HttpServletRequest object was last modified.

The doDelete() method allows a servlet to handle a DELETE request. It is called by the server via the service method. This method belongs to the HttpServlet class. The DELETE operation allows a client to remove a document or Web page from the server. This method does not need to be either safe or idempotent. Those operations that are required by DELETE can have side effects for which the users can be held accountable. It may be useful to save a copy of the affected URL in the temporary storage, while using this method. The doDelete() method returns an HTTP “Bad Request” message, if the HTTP DELETE request is incorrectly formatted. The following is the general format of this method:

protected void doDelete(HttpServletRequest rq1, HttpServletResponse rsp1) throws ServletException, java.io.IOException

Here, the parameter rq1 represents the HttpServletRequest object that contains the request the client made of the servlet. The parameter rsp1 represents the HttpServletResponse object that contains the response the servlet returns to the client. It will throw java.io.IOException if an input or output error occurs while the servlet is handling the DELETE request. It will throw ServletException if the request for the DELETE cannot be handled.

The responsibilities of a bean provider in implementing security are as follows:

Implementing programmatic security by invoking the getCallerPrincipal() and isCallerInRole() methods.

Declaring the security-role-reference element in the deployment descriptor to declare a logical name. An application assembler uses this reference to match the logical name with the real user name.

An application assembler has the following security-related responsibilities in EJB:

Declaring security roles in the deployment descriptor in the element.

Mapping security roles with the role-references using the element.

Declaring method permissions for each security role using the element.

Making certain methods inaccessible using the so that they can never be called by any client.

Excluding certain methods from being checked for authorization using the element.

Other than these, the application assembler may or may not define an optional description element that helps the deployer to map the abstract role names to the real users.

A narrowing conversion is an explicit type conversion or casting. It is used when the destination data type is narrower than the source data type, an explicit type conversion is required. The general form of this explicit conversion is given below:

(target-type) value

Here, target-type is the desired data type and value is the value to be converted.

For example:

int num1, int num2;
short num3;
num3= (short)(num1+num2);

In the example above, the sum of two 32-bit integer data type variables num1 and num2 is assigned to another variable num3, which is of integer type short (16-bit). Therefore, an explicit conversion takes place before assigning the value to num3. Otherwise, if this explicit type conversion is not performed, and the sum of variables num1 and num2 is directly assigned to variable num3, a compile-time error will be generated.

Now days uCertify is announcing discounts on multiple prep-kit purchase. uCertify’s discount on certifcation kits on this Cyber Monday discount. Our kits provide’s a strong information over your competition with our top rated exam preparation kits. Buy any three PrepKits for $134.99. uCertify is providing each prepkit withonly $44.99. To add some additonal flavour buy additional PrepKits for only $29.99. Each PrepKit comes with industry Best Money back Gurantee. If you are unable to pass, we will return your money. We provide home and Work license allows you to install PrepKit on two computers.

Just Go and Get the discount sale starts now and ends on Cyber Monday, Nov 30th. To take a glimps e of prepkits click the following link:

uCertify’s Cyber Monday Sale

public class Exc
{
public static void main(String args[])
{
int x1=0;
try {
int x3= 100/x1;
} catch(ArithmeticException e) {
System.out.println(“Illegal operation”);
} catch(RuntimeException e) {
System.out.println(“runtime error”);
return;
} catch(Exception e) {
System.out.println(“Exception found”);
} finally {
System.out.println(“Complete”);
}
System.out.println(“Successfully”);
}
}

uCertify has recently launched its updated simulation software for CX310-091( SOMG-Certified UML Professional). Why this version is different from its previous versions? The new upgrade version of SCBCD has the following enhancments:

1. It includes the latest uCertify’s prep-engine.
2. It provides 528 questions and 225 study notes that is not provided anywhere.
3. It provides the study material that makes EJB 3.0 is different from its previous versions.
4. Study material related to the critical topics of Java Persistence API Entities, Java Persistence Query Language, Java Persistence Entity Operations, General EJB 3.0 Enterprise Bean, Persistence Units and Persistence Contexts, EJB 3.0 Message-Driven Bean Component Contract, EJB 3.0 Session Bean Component Contract & Lifecycle .

To get a glimpse of the SCX310-091 PrepKit you can download its free demo version (which contains 15 free practice questions) from uCertify’s web site. Click the link below:

http://www.ucertify.com/exams/SUN/CX310-091.html

uCertify provides additional 30% discounts on its Java certification papers. Go get the latest upgraded version of the SCBCD exam Hurry!!!!!!!!!

uCertify has recently launched its updated simulation software for UM0-100 (OMG-Certified UML Professional). Why this version is different from its previous versions? The new upgrade version of UM0-100 has the following enhancments:

1. It includes the latest uCertify’s prep-engine.
2. It provides 200 questions and 115 study notes that is not provided anywhere.
3. It provides the study material that makes UML 2.0 different from its previous versions.
4. Study material related to the critical topics of Activity Diagram, Sequence Diagram, Use Case diagram, and Interaction diagrams.

To get a glimpse of the UM0-100 PrepKit you can download its free demo version (which contains 15 free practice questions) from uCertify’s web site. Click the link below:

http://www.ucertify.com/exams/OMG/UM0-100.html

UML offers a standard way to write a system’s blueprints, including conceptual components such as actors, business processes and system’s components, and activities as well as concrete things such as programming language statements, database schemas, and reusable software components.

http://www.ucertify.com/exams/OMG/UM0-100.html

uCertify provides additional 30% discounts on its UML certification papers. Go get the latest upgraded version of the OCUP exam Hurry!!!!!!!!!