You need to restrict access to the administration screens in your website.
Which two techniques test a user’s permissions before granting access to a particular screen?
A.
Enterprise JavaBeans (EJB) entity
B.
Servlet filter
C.
Custom tag library
D.
Deployment descriptor
E.
Custom JavaScript in JSP
A is wrong, rather pick B
agree
BD
BD
Granting is an EJB security feature, you can achieve it with Declarative security (xml) or Programmatic security (Annotations), with a Filter you can check permissions but not ‘granting access’,
AD right answers.
http://docs.oracle.com/cd/B14099_19/web.1012/b15505/ejbsecurity.htm
http://docs.oracle.com/javaee/6/tutorial/doc/bnbyl.html
A is definitely not correct because it say about *entity* not security
It says entity bean. Entity bean represent persistency. Not ejb security
BD