Free Oracle 1Z0-897 Exam Dumps Questions & Answers

Which security technologies are not included in WS-Security?

• A.security tokens
• B.handshake for credential exchange and session establishment
• C.encryption
• D.digital signatures

XML Signature and XML Encryption provide the foundation for message level security in Web services. Which statement about XML signature is NOT true?

• A.use detached signatures, where the digital signature covers sibling elements or external data
• B.use enveloping signatures, where the digital signature element encloses the data to be signed
• C.use enveloped signatures, where the digital signature is a child element of the data to be signed
• D.use enveloping signatures, where the digital signature is a child element of the data to be signed

Choose the option that best describe the deployer's choices, when deploying an EJB that is also exposed as a RESTful web service using JAX-RS (Choose one):

• A.The EJB can only be deployed to a web container, since RESTful access to the EJB requires a web container to support the HTTP interaction needed.
• B.The EJB can be deployed to any EJB or web container that would support local references to the EJB from the JAX-RS runtime in the web container.
• C.The EJB can be deployed to any EJB or web container that would support local references to the EJB from the JAX-RS runtime in the ejb container.
• D.The EJB can be deployed to an EJB or web container that is visible to the JAX-RS runtime, even on an application server separate from the JAX-RS runtime, since EJBs support local or remote interactions via RMI.

What would be the HTTP content-type header when a message is optimized using MTOM ? (Choose one)

• A.application/xop+xml
• B.multipart/related
• C.application/soap+xml
• D.text/xml

Given the JAX-RS root resource class fragment:

Choose the statement that best describes the configuration that would be required to support the access control constraint shown:

• A.The developer will have to configure the web container to require authenticated access to the URLs corresponding to this resource, so the proper information can be propagated to the EJB container.
• B.The developer will have to configure the web container to require authenticated access to the URLs corresponding to this resource, and then map web-tier roles to ejb-tier roles, since the JAXRS and EJB runtimes cannot use the same set of roles.
• C.The developer will have to turn on authentication in the web container configuration file, so that all incoming requests are authenticated in order to be processed.
• D.No further configuration is required - the JavaEE runtime will pick up the security constraint and configure the web container to match.