Exam 1z0-900 topic 1 question 59 discussion

Actual exam question from Oracle's 1z0-900

Question #: 59
Topic #: 1

You want to allow one set of roles to POST to a resource and another set of roles to GET it.
Which two configuration options should you use? (Choose two.)

A. two separate @HttpMethodConstraints annotations and sets of roles
B. a single @HttpMethodContstraint annotation and a map of method to roles
C. two <web-resource-collection> with different <http-method> in the deployment descriptor
D. a single <web-resource-collection> with two <auth-constraint> with different <http-method> in the deployment descriptor

Show Suggested Answer

Suggested Answer: BD 🗳️

by devmsaleh at July 28, 2022, 8:59 a.m.

Comments

Submit Cancel

orjava

7 months ago

Answer A, C https://docs.oracle.com/cd/E19226-01/820-7627/bncbl/index.html @ServletSecurity(httpMethodConstraints = { @HttpMethodConstraint(value="GET", rolesAllowed={"user"}), @HttpMethodConstraint(value="POST", rolesAllowed={"admin"})})

upvoted 2 times

...