Where can a developer specify confidentiality or integrity constraints on communications with a Enterprise Bean exposed as a JAX-RS root resource?(Choose one)

Where can a developer specify confidentiality or integrity constraints on communications with a Enterprise Bean exposed as a JAX-RS root resource?(Choose one)

A.
As annotations on the EJB exposed as a root resource.

B.
In the deployment descriptor for the EJB exposed as a root resource.

C.
In the deployment descriptor for the web application that is hosting the JAX-RS resource.

D.
In the vendor-specific configuration file for the container that is hosting the JAX-RS resource.