Bean Provider has been asked to write a stateless session bean, MyBean with a single method
breakout. A System Administrator guarantees that all clients accessing the bean will be identified
by mutual SSL authentication. The Bean Provider’s task is to ensure that breakout always logs
identity information of the client that invoked it. Which solution would satisfy this requirement?
A.
Access the identity information in the X.509 certificate used to authenticate the user from
withinbreakout.
B.
UsethegetCallerPrincipalmethod onan injected SessionContext to determinetherequired
information.
C.
Use the isCallerlnRole method onaninjected SessionContext todeterminethe required
information.
D.
Ensurethatthe breakout method is appropriately annotatedwith@RolesAllowed.
Explanation: