1Z0-897 試験問題を無料オンラインアクセス

In designing the security for your enterprise application with multiple Web services, you don't want that each of the services handle user authentication by itself. Then which of the following you can use in your design?

• A.a centralized Policy Decision Point (PDP) via XACML
• B.enable secure conversation for each service
• C.use transport level security with SSL
• D.a Security Token Service (STS)

Given the class:

Choose the URL path that would result in a call to getToken()? (Choose one)

• A./id
• B./resource/token
• C./resource/id
• D./resource/id/token

Enterprise A invokes a Web service provided by enterprise B with some parameters, and receives a response. A developer is making this interaction asynchronous so that A does not have to wait for B to finish processing. Which two actions would be appropriate to fulfill this requirement? (Choose two.)

• A.Establish a Web service endpoint for enterprise A to receive the response.
• B.Embed a correlation identifier in the request so that enterprise B can associate the response with it.
• C.Convert all Web service methods to use XML documents as parameters and return values.
• D.Read messages from a queue populated by enterprise B at peak hours when response times are too slow
• E.Partition the endpoint implementation in to interaction and processing layers so responses can be received independently.

Which two statements are true about creating a Web service with JAX-WS? (Choose two.)

• A.All Java-based endpoints share a common packaging model.
• B.JAX-WS supports creating services from source and compiled code without a WSDL.
• C.Stateless Web services must be created with HTTP servlet endpoints.
• D.Creating the portable artifacts by hand is slow, but makes a service easier to maintain.
• E.EJBs can serve as endpoints if hosted in a container with runtime and service support.

Given the resource class fragment: Choose the code fragment below that would secure access only to the Resource update() method (Choose one):

• A.<security-constraint><security-constraint> <web-resource-collection> <url-pattern>/id</url-pattern> <http-method>POST</http-method> </web-resource-collection>
• B.<security-constraint> <web-resource-collection> <url-pattern>/rest</url-pattern> <http-method>POST</http-method> </web-resource-collection>
• C.<security-constraint> <web-resource-collection> <url-pattern>/rest/id</url-pattern> <http-method>POST</http-method> <http-method>GET</http-method> </web-resource-collection>
• D.<security-constraint> <web-resource-collection> <url-pattern>/rest</url-pattern> <http-method>GET</http-method> <http-method>POST</http-method> </web-resource-collection>