最新的Java and Middleware認證 1Z0-807考試題庫

問題1

Which two actions limit the consequences of a network based attack?

A. Deploying a single sign-on system to provide system-wide authorization

B. Installing a firewall at the outer boundary of your systems

C. Allowing application servers privileged access to all databases

D. Implementing the principle of least privilege

E. Placing Internet-accessible servers in a demilitarized zone

正確答案: C,D

問題2

Your application uses web services extensively and frequently to distribute large XML objects over HTTP. In addition, the application has been set particularly demanding performance and scalability
service level agreements (SLAs).
Which java API is best suited for your application?

A. JAXR

B. DOM

C. STAX

D. JAXB

正確答案: C

問題3

: 66
You are contracted to improve the performance of an application.
While analyzing the application, you observe the following issues:
-Tight couplingbetween client and business objects -Too manyremote method Invocationsbetween client and server
Which design pattern is best suited to improving performance?

A. Service Activator

B. Value List Handler

C. Web Service Broker

D. Data Access Object

E. Session Facade

正確答案: E

說明：（僅 VCESoft 成員可見）

問題4

Which two measures are most effective in protecting websites from cross site scripting (XSS) attacks?

A. Escape "<" and ">" parameters that displayed or evaluated by the JavaScript interpreter.

B. URL-encode "<" and ">"parameters so they will never be evaluated by the JavaScript Interpreter.

C. Execute all user-supplied scripts in aserver-side sandbox.

D. Ensure that thesession cookie is sent only onHTTPSconnections.

E. Treat all user-supplied input as unsafe, and white list known good characters

正確答案: C,D

問題5

Which two security threats are negated by encrypting network transactions with Transport Layer Security (TLS)?

A. Man in the middle

B. SQL injection

C. Cross-site scripting

D. Session hijacking

E. Denial of service

正確答案: A,D

問題6

Which four services are guaranteed to be present in a specification compliant Java EE container?

A. Naming and messaging

B. Failover

C. B.Persistence

D. F.Lifecycle management

E. Multithreading handling

F. Load balancing

G. D.Remote connectivity

正確答案: A,B,C,E

說明：（僅 VCESoft 成員可見）

問題7

Which two are significant advantages of developing web applications with JavaServer Faces (JSF)?

A. Client-side validationmechanisms areautomaticallygenerated.

B. JSF pages can be integrated with AJAX.

C. Backing beans can be unit tested outside the web container.

D. JSF pages can be previewed outside the web container.

正確答案: A,B

說明：（僅 VCESoft 成員可見）

問題8

You are the architect of a JEE-based product that customers can configure to meet their own security requirements. You want to enforce basic without sacrificing customers ability to customize the product.
Which is the best method to support both requirements?

A. Build a custom security service to handle authorization

B. Define base roles and users declaratively

C. Customize the JRE sandbox model by using local variables

D. Define base roles and users programmatically

正確答案: A

問題9

You are designing a new subsystem to store and scratch for user commands in a fashion company's website. On class, CommentManager, is responsible for accessing comment data and providing read-only access to other objects in the subsystem.
Which two implementation details are necessary for the Cementmanager class?

A. All the accessor and mutator methods in CommentManager must have the static modifier in their declarations.

B. The comments must beassessabledirectly only within CommentManager.

C. CommentManager should be a singleton object.

正確答案: A,C

最新的Oracle Java EE 6 Enterprise Architect Certified Master - 1Z0-807免費考試真題

最新更新

站內鏈接

聯系我們