Where can a developer specify confidentiality or integrity constraints on communications with a Enterprise Bean exposed as a JAX-RS root resource?(Choose one)
A.
As annotations on the EJB exposed as a root resource.
B.
In the deployment descriptor for the EJB exposed as a root resource.
C.
In the deployment descriptor for the web application that is hosting the JAX-RS resource.
D.
In the vendor-specific configuration file for the container that is hosting the JAX-RS resource.
A
Authorization, or access control: The means by which interactions with resources are limited to collections of users or programs for the purpose of enforcing integrity, confidentiality, or availability constraints. This ensures that users have permission to perform operations or access data.
for this case is in the file web.xml
C. is correct
To modify the web.xml file to enable HTTPS
http://docs.adaptivecomputing.com/viewpoint/7-2-6/cloud/Content/topics/1-setup/securityConfiguration/modifyingWebxmlEnableHTTPS.htm
<web-app
<security-constraint
<web-resource-collection
web-resource-collection>
CONFIDENTIAL transport-guarantee>
user-data-constraint>
security-constraint>
web-app>