Register Login
Internet / AI Technology University (ITU/AITU)
Created by info@itofthefuture.com
Welcome Anonimous.User to this quiz related to Test JSP and Servlets.

Read the question and choose correct answers. Time is limited to 40 seconds!

Important! Do not forget to rank the quality of the question (from bad to excellent).
An initiator of the quiz will get royalty score for QnAs created by her/him and can win the Top Creativity Prize.
Question:
On your company web site there is a section for internals only. The security-role-ref for authorized personnel is given below. How can you restrict the access to this personnel? It must also be ensured that entire data transfer from this section of the company web site is encrypted. Also, the login password must be sent encrypted. This classified section is in the URI "/internal/" relative to the context root and anything that starts with "/internal/" relative to the context root. <security-role-ref> <role-name>Worker</role-name> <role-link>WorksHere</role-link> </security-role-ref>

<security-constraint>
<web-resource-collection>
<web-resource-name>internal</web-resource-name>
<url-pattern>/internal/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>Worker</role-name>
</auth-constraint>
<user-data-constraint>CONFIDENTIAL</user-data-constraint>
</security-constraint>
<login-config>
<!-- assume the application server supports it -->
<auth-method>CLIENT-CERT</auth-method>
</login-config>



<security-constraint>
<web-resource-collection>
<web-resource-name>internal</web-resource-name>
<url-pattern>/internal/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>WorksHere</role-name>
</auth-constraint>
<user-data-constraint>CONFIDENTIAL</user-data-constraint>
</security-constraint>
<login-config>
<!-- assume the application server supports it -->
<auth-method>DIGEST</auth-method>
</login-config>



<security-constraint>
<web-resource-collection>
<web-resource-name>internal</web-resource-name>
<url-pattern>/internal/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>Worker</role-name>
</auth-constraint>
<user-data-constraint>INTEGRAL</user-data-constraint>
</security-constraint>
<login-config>
<!-- assume the application server supports it -->
<auth-method>CLIENT-CERT</auth-method>
</login-config>



<security-constraint>
<web-resource-collection>
<web-resource-name>internal</web-resource-name>
<url-pattern>/internal/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>Worker</role-name>
</auth-constraint>
<user-data-constraint>CONFIDENTIAL</user-data-constraint>
</security-constraint>
<login-config>
<!-- assume the application server supports it -->
<auth-method>DIGEST</auth-method>
</login-config>



<security-constraint>
<web-resource-collection>
<web-resource-name>internal</web-resource-name>
<url-pattern>/internal/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>Worker</role-name>
</auth-constraint>
<user-data-constraint>INTEGRAL</user-data-constraint>
</security-constraint>
<login-config>
<!-- assume the application server supports it -->
<auth-method>DIGEST</auth-method>
</login-config>



Rank the Quality of the Question from "-10" (bad) or "0" (not clear) to 10 (correct) or even 20 (very good!)
-10 (bad/wrong) 0 (not clear) 10 (correct) 20 (very good!)
Your summary report will be available to you and your instructor. Thank you for your work!!!