scea dumps

8/13/2019 SCEA dumps

http://slidepdf.com/reader/full/scea-dumps 1/67

1.What are the three primary roles in a web service interaction?

(Choose three.)

A.Broker

B.Facade

C.Provider

.ecorator

!."e#$estor

F.%nterceptor



Correct&A C !

'.A stock tradin company is writin a new application or stock

market orecastin. A siniicantportion o the work re#$ired by the

b$siness loic involves naviatin thro$h the persistentob*ect

model. As lead architect on this pro*ect+ yo$ have chosen ,PA

over !,B' entity beans toimplement these persistent ob*ects. -o$

have done this to maimi/e perormance whennaviatin thro$h

the model. Why does ,PA oer better perormance or this task?

A.,PA $arantees reerential interity at the ob*ect level.B.,PA allows the application to speciy la/y or eaer retrievals.

C.,PA simpliies the so$rce code that implements the ob*ect

model.

.0he $aranteed reerential interity in !,B' entity beans is

epensive.



Correct&B

.A developer creates a ,ava web service to be $sed by

cons$mers in an 23A. 0his 23A $ses a4% service reistry.

5ow can the developer make the new service available to

cons$mers?

A.deploy to the reistry $sin ,A6"

B.p$blish to the reistry $sin ,A6"

C.#$ery the reistry $sin ,A6"PC

.taret the reistry $sin ,A6"PC



Correct&B

7.With the release o a new prod$ct line+ there has been a

siniicant increase in the vol$me otransactions on yo$r web site.

-o$ need to scale yo$r application and manae session

ailover.What is the best option or scalability?

A.add additional web servers and application servers

B.introd$ce a 5ih Availability pair and $tili/e sticky sessions

C.add additional application servers and implement 82 ro$nd

robin

.add additional application servers and $se cl$stered

5ttp2ession



Correct&

9.-o$ are asked to architect an 23A sol$tion that leveraes ,ava

web services. 0he architect$reneeds to be leible and allow or

the 23AP 1.1+ 23AP 1.'+ and "!20 implementations. Which

,ava!! technoloy sho$ld yo$ $se?

A.,A6P

B.,A6B

C.,A6W2

.,A6"PC



Correct&B

=.An online sportin oods store>s web application $ses

500P2ession to store shoppin carts.When the application is

initially deployed+ the b$siness plan predicts only a ew c$stomers

willaccess the site. 3ver time+ the store pro*ects a steady increase

in vol$me. 0he deployment plancalls or a sinle web container in

the initial deployment. As demand increases+ the plan calls

orm$ltiple web containers on separate hardware with cl$stered

500P2ession ob*ects. Which twoprinciples will help the

application meet the re#$irements and optimi/e perormance?(Choosetwo.)

A.0he application sho$ld store as m$ch as possible in

500P2ession ob*ects.

B.0he application sho$ld 830 make re#$ent $pdates to


C.0he application sho$ld make coarserained$pdates to


.0he application sho$ld create new 500P2ession ob*ects

instead o $pdatin eistin ob*ects.



Correct&B C

.-o$ are writin a $tility that searches or eistin web services

provided by lare companiesthro$h 4%. -o$r web site allows

the $ser to inp$t search criteria $sin

eventdriven+statemanaed@4% screens+ perorms the search+ and

displays them in a ormatted 50;< pae.Which technoloies

wo$ld yo$ $se or this application?

A.,2P and ,A6B

B.,2F and ,A6"

C.,2F and ,A6W2

.,2P and ,A6W2



Correct&B

.A company has a web service that provides the most recent

price or stocks+ m$t$al $nds+ andcommodities. 0he company

has the only web service that allows a person to check prices on

allthree inancial assets with one call. %ts system does not store

this inormation b$t sends individ$alcalls to each o the primary

vendors or an asset and then areates the response to

there#$ester. 0he company has committed to s$pport a

non$nctionalre#$irement (8F") orperormance that states it

m$st process all re#$ests within three seconds and each o thethreevendors is obliated to s$pport the 8F" as dictated by the

company.

Where+ in the messae low+is it appropriate to meas$re whether

all the 8F"s are met?

A.when a re#$est is received and a response is sent to there#$ester

B.when a re#$est is received+ irst call to vendor+ last response

rom vendors+ response is sent to are#$ester

C.when a re#$ester sends a re#$est+ the re#$est is received+

each call to vendor+ each response romvendor+ re#$ester

receives response

.when a re#$est is received+ each call to vendor+ each response

rom a vendor+ a response is sent to are#$ester



Correct&

1.A ,ava web component+ !,B component+ or another web

service can be a client to a webservice. Which ,ava AP% can the

client $se to access the web service thro$h a 2ervice

!ndpoint%nterace?

A.,A6B

B.,A6"

C.,BC

.,A6W2



Correct&

11.Which three are parts o a 23AP messae? (Choose three.)

A.23AP body

B.23AP endpoint

C.23AP headers

.23AP handlers

!.23AP attachments



Correct&A C !

1'.-o$ are interatin with a sinle leacy !nterprise %normation

2ystem. -o$ are interested inthe transaction manaement

capabilities o the ,ava Connector Architect$re. 0his new

systemneeds the capability to invoke m$ltiple operations aainst

this sinle leacy system. 0heseoperations s$cceed toether or

ail toether as a ro$p. 0o which minim$m level o

transactionmanaement are yo$ oin to set yo$r reso$rce

adapter?

A.8o transaction

B.<ocal transaction

C.istrib$ted transaction

.Container ;anaed transaction



Correct&B

1.What is an advantae o 6;< over 500P+ as compared to

23AP over 500P+ or web services?

A.$aranteed delivery

B.more sec$rity options

C.smaller messae si/e

.stronly typed parameters



Correct&C

17.An application needs to invoke a service on a remote system

over a low latency connection+and then wait or a response.

Which two are best or this type o invocation? (Choose two.)

A.,;2 topic

B.,;2 #$e$e

C.";% over %%3P

.synchrono$s web service

!.asynchrono$s web service



Correct&C

19.-o$r new architect$re needs to access the b$siness loic o

an !nterprise %normation 2ol$tion(!%2). What are three beneits

o $sin the ,ava Connector Architect$re to connect to !%2

insteado implementin a proprietary sol$tion? (Choose three.)

A.sec$rity

B.perormance

C.loose co$plin

.connection poolin

!.Common Client %nterace



Correct&A !

1:.-o$r web application re#$ires access to several dierent

services+ so yo$ created a 2ervice<ocator class to be $sed by the

4% developers on the team. 8ew services with dierent

interacesare occasionally added. 4nort$nately+ the cachin

beneits o the 2ervice <ocator class are 830bein reali/ed

beca$se a new instance o this class is bein created in every

backin beanmethod that re#$ires a service.

Which pattern sho$ld yo$ apply to eliminate this problem?

A.Bride

B.2inleton

C.Prototype

.Factory ;ethod

!.B$siness eleate



Correct&B

1=.What are two beneits o $sin the al$e <ist 5andler pattern?

(Choose two.)

A.improves network perormance

B.acilitates eposin eistin services

C.provides an alternative to potentially ineicient !,B inders

.acilitates postprocessinacross heteroeneo$s re#$ests

!.provides a mechanism to s$pport shared elements o

composite views



Correct&A C

1.What are two capabilities o the Abstract Factory pattern?

(Choose two.)

A.creates wholeparthierarchies

B.creates amilies o related ob*ects

C.enorces dependencies between concrete classes

.speciies the types o ob*ects to create $sin a sample instance

!.separates the constr$ction o a comple ob*ect rom its

representation



Correct&B C

1.A teenae ashion web site+ incl$des a set o paes or

displayin and browsin their catalo+as well as paes or makin

ashion s$estions that also display tables o catalo

entries.C$rrently+ the ,2P code $ses scriptlets that perorm

database 2!<!C0 statements and ormat theres$lts in 50;<

tables. -o$ have been hired to help red$ce the maintenance

overhead when eitherthe look is modiied or the database schema

chanes.

Which two patterns+ $sed toether+ do yo$apply to red$ce this

maintenance overhead? (Choose two.)

A.iew 5elper

B.Front Controller

C.Composite iew

.ata Access 3b*ect



Correct&A

'.A new sec$rity eat$re has been re#$ested or an eistin web

application with the ollowinre#$irements& All re#$ests m$st be

loed to a sec$re database. !ach re#$est m$st

betimestampedwith the start and completion times. !ach re#$est

m$st contain the %P address othe client that made the re#$est.

Which pattern is most applicable or this new eat$re?

A.2tratey

B.Front Controller

C.Abstract Factory

.%nterceptin Filter

!.;odel iew Controller



Correct&

'1.Which two are beneits o $sin the %nterceptin Filter pattern?

(Choose two.)

A.allows the recombination o ilters

B.provides eicient data sharin between ilters

C.acilitates creatin a eneric command interace

.acilitates common processin across heteroeneo$s re#$ests

!.helps to minimi/e co$plin between the presentation and

b$siness tiers



Correct&A

''.-o$ are b$ildin a s$bsystem that has several comple

components+ b$t yo$ want to hide thatcompleity rom the client

code.

Which pattern can yo$ apply to hide this compleity?

A.Proy

B.Bride

C.Adaptor

.Facade

!.ecorator



Correct&

'.2ome media players $se a virt$al proy or imae loadin.

What is the beneit o $sin a virt$alproy?

A.%t controls access to the oriinal ob*ect.

B.%t deers creation o epensive ob*ects $ntil necessary.

C.%t provides a local representation or an ob*ect in a dierent

address space.

.%t is a replacement or a bare pointer that perorms additional

actions when an ob*ect is accessed.



Correct&B

'7.-o$r company>s web site is s$pported with a cl$ster o

loadbalancedweb servers and adatabase server. 0o red$ce

epenses+ yo$r company m$st replace yo$r c$rrent cl$ster o

webservers with a sinle web server. All servers $nder

consideration have the same speciication.

Which three items will be neatively impacted by this

rearchitect$re?(Choose three.)

A.sec$rity

B.reliability

C.scalability

.availability

!.manaeability

F.maintainability



Correct&B C

'9.A company man$act$res widets or sale to distrib$tors.

istrib$tors call this company when they want to order more

widets. 0he company wants the distrib$tors to send orders $sin

6;< doc$ments over the %nternet to red$ce the n$mber o data

entry personnel needed. %t has no control over the distrib$tor>s

technoloies. 0he company does not want the orders to impact

the perormance o the other $sers. -o$ have been assined the

task o desinin the new AP%.

Which approach do yo$ take?

A.desin the AP% as a ,;2 #$e$e

B.desin the AP% as an ";% interace

C.desin the AP% as a synchrono$s web service

.desin the AP% as an asynchrono$s web service



Correct&

':.-o$ have been tasked with improvin the availability o an

eistin threetierapplication. Whatis yo$r irst step in eval$atin

what chanes sho$ld be made to the architect$re to achieve

theoal?

A.monitor network traic between tiers

B.separate presentation rom b$siness loic

C.identiy and doc$ment all sinle points o ail$re

.cl$ster the presentation tier witho$t session replication



Correct&C

'=.Which non$nctionalre#$irement is a disadvantae or a

twotierarchitect$re?

A.sec$rity

B.reliability

C.availability

.manaeability



Correct&

'.A travel company is desinin an application to allow

c$stomers to browse or inormation onany lihts operatin

domestically and to place new reservations on any o those

lihts. 0hecompany makes the ollowin ass$mptions& siniicant

read vol$me+ in terms o operations thec$stomers will perorm

siniicant overlap+ in the search criteria o c$stomers simple

processino each c$stomer browseD$pdate re#$est .

What advice can yo$ ive this company?

A.$se a twotierarchitect$re (rich client directly accessin the

database) beca$se r$nnin copies o theb$siness loic in each

client provides siniicant advantaes in terms o processin time

per re#$est

B.$se a threetierarchitect$re (thin client Eapplication server

Edatabase) beca$se eec$tin b$sinessloic remotely on a

central location res$lts in better perormance per re#$est

C.$se a threetierarchitect$re (thin client Eapplication server

Edatabase) beca$se the shared b$sinessserver allows them to

cache inormation with hih likelihood o cache hits+ which

red$ces the load on thedatabase



.$se a twotierarchitect$re (rich client directly accessin the

database) beca$se each client can operateon its own b$siness

ob*ects+ independently o others+ which provides siniicant

advantaes rom red$cedlatency d$e to synchroni/ation



Correct&C

'.A company provides call center s$pport or corporations

worldwide.!ach aent in the callcenter can be assined to

m$ltiple call center c$stomers. All o the company>s c$stomers

$seWindowsbased $ser interaces and it has *$st sined a new

c$stomer that $ses a ,ava !!backend and wants a rich interace.

0he company is developin a $ser interace or the newc$stomer

with the ollowin re#$irements& C$stomer service representatives

(C2"s) m$st be ableto work with minimal trainin on the

application. C2"s m$st be able to switch between callcentersystems #$ickly. 2creens m$st have a Windows look and

eel. ' aents spread across o$rlocations m$st be able to

$se the system.

What advice wo$ld yo$ ive this company on the $serinterace

(4%)?A.write the 4% $sin ,2P and ,20<

B.write the 4% $sin ,2Ps with embedded scriptlets

C.write the 4% $sin A*a+ accessin servlets directly

.write the 4% $sin ,ava 2win and distrib$te $sin ,8<P



Correct&

.A travel company decides to rearchitecttheir twotierapplication

(where each client ran itsown copy o the application aainst a

shared database) and hires yo$ as their lead architect.

-o$s$est they rearchitecttheir application as a

browserbased+threetiersol$tion& presentation+b$siness loic+ and

persistence. -o$ also s$est they deploy each o the three tiers

on its owncomp$ter.

Why is the three tier sol$tion more scalable than the

twotiersol$tion?

A.!very client r$ns its own @4% application. Clients do not

compete or reso$rces or presentationp$rposes.

B.Clients share the same b$siness loic tier. Clientspeciicob*ects

can be stored centrally+ optimi/inaccess.

C.!very client shares the same b$siness loic tier. !ach client

competes with each other or reso$rces onthat ,;.

.Clients share the same b$siness loic tier. $plicate eort can

be avoided by sharin ob*ects+ red$cinthe load on the database.

1. Which two can be $sed to maintain convesational state ?(Choose two.)

A. !ntity beans



B. 5ttp session

C. 2tate$l session beans

. messaeGdriven beans

!. stateless session beans

Correct B+C

'. -o$ are the architect o a pro*ect that will provide an eternal+

low latency+ scalable+ and hihlyG available sevice or handlin

strin transactions. !ach re#$est consists o a short strin % and

la$ae key+ limited to !8+ F"+ !2+ !+ and ,P. !ach

response is a simple $nicode strin averain '9: bytes in si/e+

and there will be no more than 9+ records or each lan$ae.

All the records have aleady been translated and chanes to the

records will be rare.

What sho$ld yo$ do to ens$re that yo$r service wll scale and

perorm well as new clients are added ?

A G store all the records in an <AP server and $se ,8% to

access them rom the web tier

B G deploy a standard Gtier sol$tion that is s$pported by a ast

and reliable relational database

C G deploy a sinle service on many servers in the web tier+ each

storin all the records in memory

G store all o the records in a network attached ile system so



they can be served directly rom the ile system



Correct& C

.0o$ are the architect o a web application that $ses ,2F as a

presentation tier or b$siness processes coded as stateless

session beans. When yo$ add new code to the stateless session

beans to address new acco$ntin re#$irements+ witho$t chanin

the interace+ yo$ discover that the new b$siness processes are

bein inored by some o the ,2F components.

Which miht be the ca$se o this problem?

A G 0he presentation tier is relyin on validation loic in the

b$siness tier.

B G 0he broswer is cachin o$tGoGdate versions o the ,2F

components.

C G 0he b$siness processes are not rioro$sly encps$lated in the

session beans.

G 0he new session beans have been deployed incorrectly+ and

proper deployment will resolve the problem.



Correct& C

7. -o$ have reactored yo$r leacy ,ava application into a threeG

tiered architect$re. -o$r sec$rity a$dit ro$p is concerned that

yo$r architect$re may be v$lnerable to sec$rity threats in the

separate tiers. Which two methods can yo$ $se to red$ce those

threats? (Choose two).

A G prorammatic sec$rity in the !,B entities

B G intereceptin ilters between the view and the controller

C G interceptin ilters between the controller and the model

G roleGbased sec$rity or the !,Bs in the deployement descriptor



Correct& B+

9. ra and drop the #$estion. ra the items to the proper

locations.



Correct&

:. 0he c$rrent architect$re o a ashion website consists o one

web server+ three application servers+ and a database. -o$+ as the

lead architect+ recommend addin more web servers. What aretwo valid *$stiications or new architect$re? (Choose two.)

A. 8ew web servers will decrease latency or %D3Gbo$nd re#$ests.

B. Addin m$ltiple web servers will have a positive impact on

scalability.

C. Addin new web servers will increase the overall availability o

the web site.

. 8ew web servers will increase the n$mber o $ser acco$nts

that can be s$pported.



Correct& B+C

=. Which three statements are tr$e abo$t deleation as on 33

desin techni#$e? (Choose three.)

A. %t is applied to a system only at compile time.

B. %t is an essential element o the 2tate pattern.

C. %t is an essential element o the 2inleton pattern.

. %t allows yo$ to replace inheritance with composition.

!. %n ,ava technoloy+ it is always implemented thro$h the $se o

enerics.

F. %t always re#$ires that at least two ob*ects are involved in

handlin a re#$est.



Correct& B+ + F

. Which two statements are tr$e abo$t the Flyweiht pattern?

(Choose two.)

A. %t allows a sinle instance o a class to virt$ally represent many

instances.

B. When $sed approimately it can red$ce memory demands on

yo$r servers.

C. %t allows or many instances o a class to be controlled by a

sinle instance.

. %t allows many tihtly related+ homoeneo$s ob*ects to each

maintain their own state.



Correct& A+ B

. Which two techni#$es can $sed to provide polymorphic

behavior? (Choose two.)

A. etendin a class and addin a new method

B. implementin two interaces in the same class

C. etendin a class and overridin an eistin method

. implementin an interace with several dierent classes



Correct& C+

7. As a pro*ect architect+ yo$ are selectin technoloies or a

comple+ nGtier web application>s virt$al platorm. At this stae in

the pro*ect+ which two technoloies sho$ld be o primary

consideration? (choose two.)

A. ";%

B. <in$

C. ,BC

. Fireo

!. 0omcat



Correct& A+ C

71. Which desin pattern is $se$ll or hidin the constr$ction and

implementation details o an ob*ect?

A. Flyweiht

B. 2inleton

C. Abstract Factory

. Chain o Command



Correct& C

7'. 2ome media players $se a virt$al proy or imae loadin.

What is the beneit o $sin a virt$al proy?

A. %t controls access to the oriinal ob*ect.

B. %t deers creation o epensive ob*ects $ntil necessary.

C. %t provides a local representation or an ob*ect in a dierent

address space.

. %t is a replacement or a bare pointer that perorms additional

actions when an ob*ect is accessed.



Correct& B

7. What are two capabilities o the ecorator pattern ? (Choose

two.)

A. Provides a $niied interae to a s$bsystem

B. Converts the interace o a class into another interace

C. %s $sed when the base class is $navailable or s$bclassin

. Promotes loose co$plin by keepin ob*ects rom reerrin to

each other

!. ;odiies responsibilities to individ$al ob*ects dynamically and

transparently

Correct Answers& C+ !

77. -o$ are b$ildin a web application that m$st interate to a

content manaement system(C;2). -o$r company c$rrently has

a homerown C;2+ b$t manaement is considerin p$rchasin a

new C;2.

4nort$nately+ yo$ have little conidence that their lates choice+

BiC;2+ is likely to be the inal decision. Ater analy/in theinterace to BiC;2+ yo$ ind that its interace is dierent rom the

homerown C;2. F$rthermore+ yo$ s$spect that any other thirdG

party C;2 will have yet another interace.



What is the simplest pattern that wo$ld isolate yo$r web

application rom the interace o the C;2 tool ?

A. Proy

B. Bride

C. Adapter

. 2ervice <ocator

!. B$siness eleate



Correct& C

79. What is a beneit o $sin the 0ranser 3b*ect pattern ?

A. "ed$ces re#$ests across the network

B. Avoids the overhead o $sin !,B inder methods or lare

searches

C. 2eparates the b$siness state and related behavior rom the

rest o the appliation

. %mplements parentGchild relationships eiciently when

imlementin B$siness 3b*ects



Correct& A

7:. What are two beneits o $sin the al$e <ist 5andler pattern?

(Choose two.)

A. %mproves network perormence

B. Facilitates eposin eistin services

C. Provides an alternative to petentially ineicient !,B inders.

. Facilitates postGprocessin across heteroeneo$s re#$sts

!. Provides a mechanism to s$pport shared eleemnts o

composite views

Correct Answers& A+ C

7=. A company created its own ;CGlike ramework in the years

beore str$ts and ,2F. 4nort$nately+ the company>s Front

Controller has become bloated with too many eat$res incl$din

ineGrained a$thori/ation+ view dispatchin+ and b$siness loic

invocation. Which three patterns co$ld be applied to red$ce the

compleity o the Front Controller? (choose three.)

A. ;ediator

B. Command

C. iew 5elper



. %nterceptin Filter

!. Composite iew.

F. Application controller

Correct Answers& B+ + F

7. What are two advantaes o the B$siness eleate pattern?

(Choose two.)

A. %ncreases the scalability o remote services

B. eco$ples presentation loc rom b$siness loic

C. Avoids $nnecessary invocation o remote services

. 5ides $nderlyin comm$nication details o the service

!. !nables transparent presistent storae o the b$siness entity

Correct Answers& C+

7. What are two advantaes o a thin client+ three tier

architect$re over a thick client+ twoGtier architect$re ? (choose

two.)

A. %t is more sec$re.

B. %t is more reliable



C. %t is easier to maintain.

. %t makes it easier to manae the application deployment.

Correct Answers& C+

9. A teenae ashion website+ has a m$ltiGtier web application

with 1 web servers+ 1' middleGtier servers+ and a lare "B;2

server with more than eno$h capacity to s$pport peak loads. -o$

are the architect o the system+ and yo$ are concerned abo$t

reliability o the web application. Which chane co$ld yo$ make to

improve reliability ?

A. Add additional web servers.

B. Add additional database servers

C. Add additional middleGtier servers

. "ed$ce the n$mber o web servers

!. "ed$ce the n$mber o middleGtier servers.



Correct& B

91. Which is 830 a valid reason to separate presentation rom

b$siness loic ?

A. %mproved scalability

B. %mproved perormence

C. 2eparation o cencerns

. %mproved maintainability



Correct& B

9'. A company is considerin reGarchitectin their application rom

a twoGtier to a threeGtier architect$re. 0o see what impact the new

architect$re wo$ld have on their nonG$ntional re#$irements

(8F"s)+ they created a prototype.

When they tested the prototype based on their threeGtier

architect$re they noticed+ contrary to epectations+ that the

prototype was less scalable than the oriinal twoGtier sol$tion.

Which two statements eplain the res$lt? (Choose two.)

A. Clients end $p competin or CP4 cycles on the common

b$siness loic tier.

B. Clients end $p competin or reso$rces on the backGend

database $sed by the application.

C. Clients did 830 share interest in any domain ob*ects+ b$t the

b$siness tier spent too m$ch time coordinatin amon clients

anyway.

. Clients did 830 share interest in any domain ob*ects and the

b$siness tier ran o$t o memory to represent all domain ob*ects

re#$ired by the clients.

Correct Answers& A+

9. Which two statements are tr$e only when implementin rich



client applications+ and 830 when implementin web browserG

based clients that s$pport only 50;<? (Choose two.)

A. %normation can be sent to the client by the server+ witho$t

client pollin

B. %normation can be encrypted prior to deliverin it to the client

and decrypted when received to the client.

C %normation can be compressed prior to deliverin it to the client

and decompressed when received ro the client.

. %normation can be delivered to the client incrementally+ witho$t

re#$irin that the server deliver all the inormation to be presented

to the client on each $pdate.

Correct Answers& A+

97. A bank desined its irstGeneration webGbased bankin

system aro$n a ,ava technoloy rich client application that

interacts with serverGside service ob*ects implemented as state$l

session beans in a portable ,ava !! application. For their

secondGeneration system+ the company wants to open the

architect$re to other types o clients. 0he company is considerin

eposin its eistin state$l session bean service as a web

service. Which statement is tr$e ?

A. 2ession beans cannot be eposed as web services.

B 2tate$l session beans cannot be eposed as web services.



C. 2tate$l session beans are a$tomatically eposed as web

services.

. 2tate$l session beans annotated with HWeb2ervice are

eposed as web services.



Correct& B

99. Brokers at a irm c$rrently $se a twoGtier application to

eec$te stock transactions on behal the their c$stomers.

B$siness componens within the application enorce a n$mber o

comple b$siness r$les that ens$re that stock transactions are

eec$ted properly.

;anaement has decided that clients sho$ld be able to eec$te

their own transactions to streamline operations. ;anaement also

wants clients to r$n the same eistin twoGtier applications romtheir home comp$ters. 0hey have hired yo$ to advise them on

how to proceed to $ns$re that no illeal stock transactions are

eec$ted once the application is available directly to clients.

Which two recommendations sho$ld yo$ ive to this brokerae

irm? (Choose two.)

A. 0he code already checks or correct eec$tion so they can

deliver the application to clients as is

B. Checks or correctness sho$ld be rewritten as database

constraints beca$se the application r$nnin on the client miht be

modiied.

C. 0he application sho$ld be reGarchitected as a theeGtier sol$tion.

0hat way+ validation checks can be moved to a serverGside

b$siness tier+ which remains tr$stworthy.

. 0he application sho$ld be ob$scated beore it is delivered to



the client. 0hat way+ clients cannot modiy it. 0hereore+ the

validation checks c$rrently implemented will remain tr$stworthy.

Correct Answers& B+ C

9:. A travel company reGarchitected its application rom a twoGtier

to a threeGtier architect$re. 0o see what impact the new

architect$re wo$ld have on its nonG$nctional re#$irements(8F")+

the company intends to b$ild a prototype based on the new

architect$re. 0he company compared the ;F" metrics associated with the new prototype aainst the metrics rom their oriinal twoG

tier sol$tion. What is an advantae o the oriinal twoGtier

sol$tion?

A. %t has better availability beca$se it has ewer sinle point o

ail$re.

B. %t has better manaeability beca$se each client has its own

copy o the application.

C. %t has better perormence beca$se each client m$st $se is own

set o domain ob*ects.

. %t has better scalability beca$se each client can access the

database independently o other clients.

9=. 0he ,ava system yo$ are enhancin needs an interation

point to an eternal system to ain access to data stored in a

database. 0he application $ses an open database connectivity



data so$rce to access data. What do yo$ $se to connect to the

database ?

A. 6;< over 500P

B. "PCGstyle 23AP

C. ";%G%%3P and !,B

. ,BCG3BC bride driver



Correct&

9. ,ava Connector Architect$re (,CA) as a technoloy sol$tion

addresses certain needs or yo$r ,ava applications. What is the

best description o a ,CA sol$tion. ?

A. asynchron$o$s messaeGbased interaces

B. interation o slow responders in a looselyGco$pled way

C. access tihtlyGco$pled b$siness loic o leacy systems

. interation o systemsDcomponents and $arantein messae

delivery



Correct& C

9. -o$r client is interested in the beneits or interation with an

eternal system $sin ";%G%%3P+ ";%G,";P+ and C3"B2 or

eternal ineration. What sho$ld yo$ tell yo$r client?

A. An ";%G,";P client can call a C3"BA server.

B. A C3"BA client can call an ";%I,";P server.

C. An ";%G,";P client can call an ";%I%%3P server.

. A C3"BA client CA8830 call an ";%G%%3P server.



Correct& C

:. -o$r online eGcommerce application has a messae driven

bean (;B) that calls an email server. Which statement abo$t

invokin the ;B is tr$e?

A. 0he client can access the ;B directly.

B. 0he client accesses the ;B $sin an interace.

C. A messae driven bean is simply a ,;2 messae provider.

. A ,;2 messae is sent to the destination to which the ;B is

listenin.



Correct& A

:1. 23AP was selected as an interation technoloy or the

leibility o messain styles it s$pports (in partic$lar+ how an

6;< payload can be presented in a 23AAP messae). Which

messae style statement is correct?

A. 0he body o an "PCGstyle 23AP messae cannot be a literal

messae.

B. 0he 6;< payload or a doc$mentGstyle messae cannot be an

encoded messae.

C. 0he 6;< payload or "PC and doc$mentGstyle messaes

$arantee 6;< payload delivery.

. An "PCGstyle messae has the 6;< payload wrapped inside

an operation element in a 23AP body



Correct&

:'. As part or yo$ ,ava application+ yo$ are re#$ired to interate

with an eternal system that has a ,ava web service. 0ha *ava

web service is $sin synchrono$s comm$nication and eposes

several methods with varyin method sinat$res. Which

technoloy do yo$ $se or this sol$tion?

A. ,;2

B. 23AP

C. ";%G%%3P

. ";%G,";P



Correct& B

:. -o$r company is oin thro$h an etensive sec$rity a$dit

and it has been identiied that yo$r internetGacin web site is

v$lnerable to 2J< in*ection rom a$thenticated $sers. Which two

are appropriate or mitiatin this threar? (Choose two.)

A. 4sin sec$rity roles in the deployement descriptor

B. %n stored proced$res called with prepared statements

C. Addin an interceptin validation ilter to yo$r syste+

. "e#$irin 22< in the deployement descriptor transport

$arantee.

Correct Answers& B+ C.

:7. -o$r competitor is tryin to crash yo$r web site by $sin

vario$s enial o 2ervice attacks. Which two laws sho$ld yo$

protect aainst or this speciic threat? (Choose two.)

A. 2J< in*ection

B. b$er overlow

C. ;an in the middle

. session hi*ackin



!. weak password eploits

Correct Answers& A+ B

:9. Which is an appropriate techni#$e or minimi/in the

conse#$ences o a s$ccess$l attack?

A. %np$t validation

B. Principle o least privilee

C. !ncryption os wire transmissions

. 4se o stronDtwoGactor a$thentication



Correct& B

::. What is the appropriate location to coni$re a ,2P based

application to re#$ire sec$re comm$nication between a broswer

and partic$lar reso$rces?

A. %n the application code

B. %n the b$sinessGtier code

C. %n the broswer coni$ration

. %n the deployement descriptor

!. %n the web server coni$ration



Correct& .

:=. 2ervice methodA()+ implemented in a session bean+ perorms

a hihly sensitive operation. 0his operation m$st be available in

limited ways to low privilee $sers to s$pport a low sensitivity

operationB()

Which approach addresses the re#$irements most sec$rely?

A. mark the methodA() as accessible to all necessary roles

B. mark the methodA() as accessible to all appropriate roles+ and

$se the prorammatic sec$rity model to impose the necessary

additional restrictions

C. mark the methodA() as accessible to all appropriate roles+ and

$se the deployment desciptor to indicate the conditions $nder

which each role can invoke the hih priority method

. mark methodA() as accessible only to a special role+ then $se

a r$nGas element to invoke A() rom B()K beore makin the call to

A()+ B() checks that conditions are appropriate or the call



Correct& .

scea dumps

Documents