A custom tag is defined to take three attributes. Which two correctly invoke the tag within a
JSP page? (Choose two.)

• A. <prefix:myTag a="foo" b="bar" c="baz" />
• B. <prefix:myTag>
  < jsp:attribute name="a">foo</jsp:attribute>
  < jsp:attribute name="b">bar</jsp:attribute>
  < jsp:attribute name="c">baz</jsp:attribute>
  < /prefix:myTag>
• C. <prefix:myTag>
  < jsp:attribute ${"foo", "bar", "baz"} />
  < /prefix:myTag>
• D. <prefix:myTag jsp:attribute a="foo" b="bar" c="baz" />
• E. <prefix:myTag>
  < jsp:attribute a:foo b:bar c:baz />
  < /prefix:myTag>
• F. <prefix:myTag>
  < jsp:attribute a="foo" b="bar" c="baz"/>
  < /prefix:myTag>
• G. <prefix:myTag attributes={"foo","bar","baz"} />

Given the security constraint in a DD:
1 01. <security-constraint>
1 02. <web-resource-collection>
1 03. <web-resource-name>Foo</web-resource-name>
1 04. <url-pattern>/Bar/Baz/*</url-pattern>
1 05. <http-method>POST</http-method>
1 06. </web-resource-collection>
1 07. <auth-constraint>
1 08. <role-name>DEVELOPER</role-name>
1 09. </auth-constraint>
1 10. </security-constraint>
And given that "MANAGER" is a valid role-name, which four are true for this security constraint? (Choose four.)

• A. DEVELOPER can do only a POST on resources in the /Bar/Baz directory.
• B. DEVELOPER can do a TRACE on any resource in the /Bar/Baz directory.
• C. MANAGER can do a GET on resources in the /Bar/Baz directory.
• D. MANAGER can do a TRACE on any resource in the /Bar/Baz directory.
• E. DEVELOPER can do a GET on resources in the /Bar/Baz directory.
• F. MANAGER can do a POST on any resource in the /Bar/Baz directory.

Which two directives are applicable only to tag files? (Choose two.)

• A. include
• B. tag
• C. taglib
• D. page
• E. variable

Given this fragment in a servlet:
2 3. if(req.isUserInRole("Admin")) {
2 4. // do stuff
2 5. }
And the following fragment from the related Java EE deployment descriptor:
8 12. <security-role-ref>
8 13. <role-name>Admin</role-name>
8 14. <role-link>Administrator</role-link>
8 15. </security-role-ref>
9 00. <security-role>
9 01. <role-name>Admin</role-name>
9 02. <role-name>Administrator</role-name>
9 03. </security-role>
What is the result?

• A. Line 24 can never be reached.
• B. If line 24 executes, the user's role will be Admin.
• C. If line 24 executes, the user's role will be Administrator.
• D. If line 24 executes the user's role will NOT be predictable.
• E. The deployment descriptor is NOT valid.