You are architecting a new Internet-deployed application and you want to restrict access to parts
of the system for security purposes. Which three security restrictions can be specified in the
deployment descriptor according to the servlet API specification standards? (Choose three.)
A.
On page forwarding
B.
On encryption methods
C.
Based on the role name
D.
Based on the user name
E.
Based on the URL pattern
F.
Based on the HTTP method