Head First EJB

Coffee Cram: Mock Exam Answers

1. What’s true about security for EJBs? (Choose all that apply.)

   (spec: 434-435)

   	A.	All security policies must be expressed declaratively.
   	B.	The default security principal under which a method invocation is performed is that of the component’s creator.
   	C.	Using EJBs, method permissions can be declared using EJB QL in the deployment descriptor.
   	D.	Security authorization can be bypassed on a method by method basis.
   	E.	Security authorization can be bypassed on an instance by instance basis.

2. What’s true about methods that should run without being checked for authorization? (Choose all that apply.)

   (spec: 443)

   	A.	They can be listed in the <exclude-list> element. - For methods that must NEVER be called
   	B.	They can be listed in the <unchecked> element.
   C.	When the <unchecked> element is used, ...