No replies to this topic

[j2ee]

First one:

Which two/three statements are true about the security-related tags in a valid Java EE deployment
descriptor? (Choose two/three.)
A. Every <security-constraint> tag must have at least one <http-method> tag.
B. A <security-constraint> tag can have many <web-resource-collection> tags.
C. A given <auth-constraint> tag can apply to only one <web-resource-collection> tag.
D. A given <web-resource-collection> tag can contain from zero to many <url-pattern> tags.
E. It is possible to construct a valid <security-constraint> tag such that, for a given resource, no
user roles can access that resource.
Answer: B,E or B,D,E

I showed to my friends, some said it should be B and E, some said it should be B,D,E
What is the correct answer?

Second one:

A developer is designing a multi-tier web application and discovers a need to hide the details of
establishing and maintaining remote communications from the client. In addition, because the
business and resource tiers are distributed, the application needs to minimize the inter-tier
network traffic related to servicing client requests. Which design patterns, working together,
address these issues?
A. Front Controller and Transfer Object
B. Front Controller and Service Locator
C. Business Delegate and Transfer Object
D. Business Delegate and Intercepting Filter
E. Model-View-Controller and Intercepting Filter
Answer: C

I don't really understand why this is C, I thought it should be related to Service Locator.

Thrid one:

application. These servlets have become rather difficult to maintain because the request
processing methods have become very large. There is also common processing code in many
servlets because these use cases are very similar. Which two design patterns can be used
together to refactor and simplify this web application? (Choose two.)
A. Proxy
B. View Helper
C. Front Controller
D. Session Facade
E. Business Delegate
F. Model-View-Controller
Answer: C, F

I cannot explain to myself why it is C,F

Thanks!