CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ320

Secure Software Implementation

The Web resource collection is a security-constraint element described in the Java Servlet Specification v2.4. Which of the following elements does it contain?

Each correct answer represents a complete solution.

Choose two
  • A HTTP methods
  • B Role names
  • C Transport guarantees
  • D URL patterns
Explanation

A web-resource-collection identifies the resources subject to a security constraint through URL patterns and, optionally, HTTP methods. Role names are specified by an authorization constraint, while transport guarantees are specified by a user-data constraint.

Community Discussion

No comments yet. Be the first to start the discussion!