Which two techniques test a user’s permissions before granting access to a particular screen?

You need to restrict access to the administration screens in your website. Which two
techniques test a user’s permissions before granting access to a particular screen?

A.
Deployment descriptor

B.
Custom JavaScript in JSP

C.
Servlet filter

D.
Enterprise JavaBeans (EJB) entity

E.
Custom tag library