SUN Sun Certified Web Component Developer for J2EE 5 Sample Questions:

1. You have created a JSP that includes instance variables and a great deal of scriptlet code.
Unfortunately, after extensive load testing, you have discovered several race conditions in your JSP scriptlet code. To fix these problems would require significant recoding, but you are already behind schedule. Which JSP code snippet can you use to resolve these concurrency problems?

A) <%@ implements SingleThreadModel %>
B) <%! implements SingleThreadModel %>
C) <%@ page isThreadSafe='false' %>
D) <%@ page implements='SingleThreadModel' %>
E) <%@ page useSingleThreadModel='true' %>

2. One of the use cases in your web application uses many session-scoped attributes. At the end of the use case, you want to clear out this set of attributes from the session object.
Assume that this static variable holds this set of attribute names:
2 01. private static final Set<String> USE_CASE_ATTRS;
2 02. static {
2 03. USE_CASE_ATTRS.add("customerOID");
204. USE_CASE_ATTRS.add("custMgrBean");
205. USE_CASE_ATTRS.add("orderOID");
206. USE_CASE_ATTRS.add("orderMgrBean");
207. }
Which code snippet deletes these attributes from the session object?

A) for ( String attr : USE_CASE_ATTRS ) {
session.removeAttribute(attr);
}
B) session.deleteAllAttributes(USE_CASE_ATTRS);
C) for ( String attr : USE_CASE_ATTRS ) {
session.remove(attr);
}
D) for ( String attr : USE_CASE_ATTRS ) {
session.deleteAttribute(attr);
}
E) session.removeAll(USE_CASE_ATTRS);

3. A developer is designing the presentation tier for a web application that relies on a complex session bean. The session bean is still being developed and the APIs for it are NOT finalized. Any changes to the session bean API directly impacts the development of the presentation tier. Which design pattern provides a means to manage the uncertainty in the
API?

A) Business Delegate
B) Intercepting Filter
C) View Helper
D) Chain of Responsibility
E) Composite View
F) Front Controller

4. DRAG DROP
Click the Task button.
Place the events in the order they occur.

5. Given the security constraint in a DD:
1 01. <security-constraint>
1 02. <web-resource-collection>
1 03. <web-resource-name>Foo</web-resource-name>
1 04. <url-pattern>/Bar/Baz/*</url-pattern>
1 05. <http-method>POST</http-method>
1 06. </web-resource-collection>
1 07. <auth-constraint>
1 08. <role-name>DEVELOPER</role-name>
1 09. </auth-constraint>
1 10. </security-constraint>
And given that "MANAGER" is a valid role-name, which four are true for this security constraint? (Choose four.)

A) MANAGER can do a POST on any resource in the /Bar/Baz directory.
B) DEVELOPER can do a TRACE on any resource in the /Bar/Baz directory.
C) MANAGER can do a TRACE on any resource in the /Bar/Baz directory.
D) MANAGER can do a GET on resources in the /Bar/Baz directory.
E) DEVELOPER can do a GET on resources in the /Bar/Baz directory.
F) DEVELOPER can do only a POST on resources in the /Bar/Baz directory.

Solutions: