Few more questions for the exam:
57. The Java system you are enhancing needs an integration point to an external system to gain access to data stored in a database. The application uses an open database connectivity data source to access data. What do you use to connect to the database ?
A. XML over HTTP
B. RPC-style SOAP
C. RMI-IIOP and EJB
D. JDBC-ODBC bridge driver
Correct Answer: D
58. Java Connector Architecture (JCA) as a technology solution addresses certain needs for your Java applications. What is the best description of a JCA solution. ?
A. asynchronuous message-based interfaces
B. integration of slow responders in a loosely-coupled way
C. access tightly-coupled business logic of legacy systems
D. integration of systems/components and guaranteing message delivery
Correct Answer: C
59. Your client is interested in the benefits or integration with an external system using RMI-IIOP, RMI-JRMP, and CORBS for external inegration. What should you tell your client?
A. An RMI-JRMP client can call a CORBA server.
B. A CORBA client can call an RMI_JRMP server.
C. An RMI-JRMP client can call an RMI_IIOP server.
D. A CORBA client CANNOT call an RMI-IIOP server.
Correct Answer: C
60. Your online e-commerce application has a message driven bean (MDB) that calls an email server. Which statement about invoking the MDB is true?
A. The client can access the MDB directly.
B. The client accesses the MDB using an interface.
C. A message driven bean is simply a JMS message provider.
D. A JMS message is sent to the destination to which the MDB is listening.
Correct Answer: A
61. SOAP was selected as an integration technology for the flexibility of messaging styles it supports (in particular, how an XML payload can be presented in a SOAAP message). Which message style statement is correct?
A. The body of an RPC-style SOAP message cannot be a literal message.
B. The XML payload for a document-style message cannot be an encoded message.
C. The XML payload for RPC and document-style messages guarantee XML payload delivery.
D. An RPC-style message has the XML payload wrapped inside an operation element in a SOAP body
Correct Answer: D
62. As part or you Java application, you are required to integrate with an external system that has a Java web service. Tha java web service is using synchronous communication and exposes several methods with varying method signatures. Which technology do you use for this solution?
A. JMS
B. SOAP
C. RMI-IIOP
D. RMI-JRMP
Correct Answer: B
63. Your company is going through an extensive security audit and it has been identified that your internet-facing web site is vulnerable to SQL injection from authenticated users. Which two are appropriate for mitigating this threar? (Choose two.)
A. Using security roles in the deployement descriptor
B. In stored procedures called with prepared statements
C. Adding an intercepting validation filter to your syste,
D. Requiring SSL in the deployement descriptor transport guarantee.
Correct Answers: B, C.
64. Your competitor is trying to crash your web site by using various Denial of Service attacks. Which two flaws should you protect against for this specific threat? (Choose two.)
A. SQL injection
B. buffer overflow
C. Man in the middle
D. session hijacking
E. weak password exploits
Correct Answers: A, B
65. Which is an appropriate technique for minimizing the consequences of a successful attack?
A. Input validation
B. Principle of least privilege
C. Encryption os wire transmissions
D. Use of strong/two-factor authentication
Correct Answer: B
66. What is the appropriate location to configure a JSP based application to require secure communication between a broswer and particular resources?
A. In the application code
B. In the business-tier code
C. In the broswer configuration
D. In the deployement descriptor
E. In the web server configuration
Correct Answer: D.
67. Service methodA(), implemented in a session bean, performs a highly sensitive operation. This operation must be available in limited ways to low privilege users to support a low sensitivity operationB()
Which approach addresses the requirements most securely?
A. mark the methodA() as accessible to all necessary roles
B. mark the methodA() as accessible to all appropriate roles, and use the programmatic security model to impose the necessary additional restrictions
C. mark the methodA() as accessible to all appropriate roles, and use the deployment desciptor to indicate the conditions under which each role can invoke the high priority method
D. mark methodA() as accessible only to a special role, then use a run-as element to invoke A() from B(); before making the call to A(), B() checks that conditions are appropriate for the call
Correct Answer: D.
Showing posts with label Material. Show all posts
Showing posts with label Material. Show all posts
Sunday, March 29, 2009
Saturday, February 14, 2009
SCEA 5.0 - Exam Questions - 3
Few more questions for the exam:
31. Which two can be used to maintain convesational state ? (Choose two.)
A. Entity beans
B. Http session
C. Stateful session beans
D. message-driven beans
E. stateless session beans
Correct B,C
32. You are the architect of a project that will provide an external, low latency, scalable, and highly- available sevice for handling string transactions. Each request consists of a short string ID and laguage key, limited to "EN", "FR", "ES", "DE", and "JP". Each response is a simple unicode string averaging 256 bytes in size, and there will be no more than 50,000 records for each language. All the records have aleady been translated and changes to the records will be rare.
What should you do to ensure that your service wll scale and perform well as new clients are added ?
A - store all the records in an LDAP server and use JNDI to access them from the web tier
B - deploy a standard 3-tier solution that is supported by a fast and reliable relational database
C - deploy a single service on many servers in the web tier, each storing all the records in memory
D - store all of the records in a network attached file system so they can be served directly from the file system
Correct: C
33.Tou are the architect of a web application that uses JSF as a presentation tier for business processes coded as stateless session beans. When you add new code to the stateless session beans to address new accounting requirements, without changing the interface, you discover that the new business processes are being ignored by some of the JSF components.
Which might be the cause of this problem?
A - The presentation tier is relying on validation logic in the business tier.
B - The broswer is caching out-of-date versions of the JSF components.
C - The business processes are not rigorously encpsulated in the session beans.
D - The new session beans have been deployed incorrectly, and proper deployment will resolve the problem.
Correct: C
34. You have refactored your legacy Java application into a three-tiered architecture. Your security audit group is concerned that your architecture may be vulnerable to security threats in the separate tiers. Which two methods can you use to reduce those threats? (Choose two).
A - programmatic security in the EJB entities
B - interecepting filters between the view and the controller
C - intercepting filters between the controller and the model
D - role-based security for the EJBs in the deployement descriptor
Correct: B,D
35. Drag and drop the question. Drag the items to the proper locations.
40. As a project architect, you are selecting technologies for a complex, n-tier web application's virtual platform. At this stage in the project, which two technologies should be of primary consideration? (choose two.)
31. Which two can be used to maintain convesational state ? (Choose two.)
A. Entity beans
B. Http session
C. Stateful session beans
D. message-driven beans
E. stateless session beans
Correct B,C
32. You are the architect of a project that will provide an external, low latency, scalable, and highly- available sevice for handling string transactions. Each request consists of a short string ID and laguage key, limited to "EN", "FR", "ES", "DE", and "JP". Each response is a simple unicode string averaging 256 bytes in size, and there will be no more than 50,000 records for each language. All the records have aleady been translated and changes to the records will be rare.
What should you do to ensure that your service wll scale and perform well as new clients are added ?
A - store all the records in an LDAP server and use JNDI to access them from the web tier
B - deploy a standard 3-tier solution that is supported by a fast and reliable relational database
C - deploy a single service on many servers in the web tier, each storing all the records in memory
D - store all of the records in a network attached file system so they can be served directly from the file system
Correct: C
33.Tou are the architect of a web application that uses JSF as a presentation tier for business processes coded as stateless session beans. When you add new code to the stateless session beans to address new accounting requirements, without changing the interface, you discover that the new business processes are being ignored by some of the JSF components.
Which might be the cause of this problem?
A - The presentation tier is relying on validation logic in the business tier.
B - The broswer is caching out-of-date versions of the JSF components.
C - The business processes are not rigorously encpsulated in the session beans.
D - The new session beans have been deployed incorrectly, and proper deployment will resolve the problem.
Correct: C
34. You have refactored your legacy Java application into a three-tiered architecture. Your security audit group is concerned that your architecture may be vulnerable to security threats in the separate tiers. Which two methods can you use to reduce those threats? (Choose two).
A - programmatic security in the EJB entities
B - interecepting filters between the view and the controller
C - intercepting filters between the controller and the model
D - role-based security for the EJBs in the deployement descriptor
Correct: B,D
35. Drag and drop the question. Drag the items to the proper locations.
Correct:
36. The current architecture of a fashion website consists of one web server, three application servers, and a database. You, as the lead architect, recommend adding more web servers. What are two valid justifications for new architecture? (Choose two.)
A. New web servers will decrease latency for I/O-bound requests.
B. Adding multiple web servers will have a positive impact on scalability.
C. Adding new web servers will increase the overall availability of the web site.
D. New web servers will increase the number of user accounts that can be supported.
B. Adding multiple web servers will have a positive impact on scalability.
C. Adding new web servers will increase the overall availability of the web site.
D. New web servers will increase the number of user accounts that can be supported.
Correct: B,C
37. Which three statements are true about delegation as on OO design technique? (Choose three.)
A. It is applied to a system only at compile time.
B. It is an essential element of the State pattern.
C. It is an essential element of the Singleton pattern.
D. It allows you to replace inheritance with composition.
E. In Java technology, it is always implemented through the use of generics.
F. It always requires that at least two objects are involved in handling a request.
B. It is an essential element of the State pattern.
C. It is an essential element of the Singleton pattern.
D. It allows you to replace inheritance with composition.
E. In Java technology, it is always implemented through the use of generics.
F. It always requires that at least two objects are involved in handling a request.
Correct: B, D, F
38. Which two statements are true about the Flyweight pattern? (Choose two.)
A. It allows a single instance of a class to virtually represent many instances.
B. When used approximately it can reduce memory demands on your servers.
C. It allows for many instances of a class to be controlled by a single instance.
D. It allows many tightly related, homogeneous objects to each maintain their own state.
B. When used approximately it can reduce memory demands on your servers.
C. It allows for many instances of a class to be controlled by a single instance.
D. It allows many tightly related, homogeneous objects to each maintain their own state.
Correct: A, B
39. Which two techniques can used to provide polymorphic behavior? (Choose two.)
A. extending a class and adding a new method
B. implementing two interfaces in the same class
C. extending a class and overriding an existing method
D. implementing an interface with several different classes
B. implementing two interfaces in the same class
C. extending a class and overriding an existing method
D. implementing an interface with several different classes
Correct: C, D
40. As a project architect, you are selecting technologies for a complex, n-tier web application's virtual platform. At this stage in the project, which two technologies should be of primary consideration? (choose two.)
A. RMI
B. Linux
C. JDBC
D. Firefox
E. Tomcat
B. Linux
C. JDBC
D. Firefox
E. Tomcat
Correct: A, C
Monday, February 9, 2009
SCEA1.5 - My Experience
Hi I have attended SCEA5.0 recently, I'm updating all the information from my experience and posted the material that I have prepared as part of my preparation.
It consists of all the questions on new technologies and new versions exactly to say J2EE 1.5 technologies.
Below are the types of questions that I have faced:
Which one to use JSF , JSP, Servlets
Which one to use JPA, JDO or JDBC
Which one to use EJB3.0 or older
Which one to use web services, SOA, session beans, JMS
Security questions from JAAS
Desing Patterns
The below topics are mandatory to prepare:
EJB3.0,
Web Services (JAX-WS, JAX-RPS)
XML binding JAXB,(i think SaTX)
EJB3.0JPA, JDO
SOA
JMS
GOf Desgin patterns
J2EE design patterns
JSF etc.,
Here is the tutorial for which sun is covering the exam
http://java.sun.com/javaee/5/docs/tutorial/doc/gfirp.html
These are few questions from SCEA 1.5 exam (that i found on the net and repeated in the exam):
1.What are the three primary roles in a web service interaction? (Choose three.)
A.Broker
B.Facade
C.Provider
D.Decorator
E.Requestor
F.Interceptor
Correct:A C E
2.A stock trading company is writing a new application for stock market forecasting. A significantportion of the work required by the business logic involves navigating through the persistentobject model. As lead architect on this project, you have chosen JPA over EJB2 entity beans toimplement these persistent objects. You have done this to maximize performance whennavigating through the model. Why does JPA offer better performance for this task?
A.JPA guarantees referential integrity at the object level.
B.JPA allows the application to specify lazy or eager retrievals.
C.JPA simplifies the source code that implements the object model.
D.The guaranteed referential integrity in EJB2 entity beans is expensive.
Correct:B
3.A developer creates a Java web service to be used by consumers in an SOA. This SOA uses aUDDI service registry. How can the developer make the new service available to consumers?A.deploy to the registry using JAXR
B.publish to the registry using JAXR
C.query the registry using JAXRPC
D.target the registry using JAXRPC
Correct:B
4.With the release of a new product line, there has been a significant increase in the volume oftransactions on your web site. You need to scale your application and manage session failover.What is the best option for scalability?
A.add additional web servers and application servers
B.introduce a High Availability pair and utilize sticky sessions
C.add additional application servers and implement DNS round robin
D.add additional application servers and use clustered HttpSession
Correct:D
5.You are asked to architect an SOA solution that leverages Java web services. The architectureneeds to be flexible and allow for the SOAP 1.1, SOAP 1.2, and REST implementations. Which JavaEE technology should you use?
A.JAXP
B.JAXB
C.JAXWS
D.JAXRPC
Correct:C
For Java related information please visit my other blog
http://java-issues-solutions.blogspot.com/2009/02/java-issues-and-solutions-1.html
it will have few java issues and solutions for them.
It consists of all the questions on new technologies and new versions exactly to say J2EE 1.5 technologies.
Below are the types of questions that I have faced:
Which one to use JSF , JSP, Servlets
Which one to use JPA, JDO or JDBC
Which one to use EJB3.0 or older
Which one to use web services, SOA, session beans, JMS
Security questions from JAAS
Desing Patterns
The below topics are mandatory to prepare:
EJB3.0,
Web Services (JAX-WS, JAX-RPS)
XML binding JAXB,(i think SaTX)
EJB3.0JPA, JDO
SOA
JMS
GOf Desgin patterns
J2EE design patterns
JSF etc.,
Here is the tutorial for which sun is covering the exam
http://java.sun.com/javaee/5/docs/tutorial/doc/gfirp.html
These are few questions from SCEA 1.5 exam (that i found on the net and repeated in the exam):
1.What are the three primary roles in a web service interaction? (Choose three.)
A.Broker
B.Facade
C.Provider
D.Decorator
E.Requestor
F.Interceptor
Correct:A C E
2.A stock trading company is writing a new application for stock market forecasting. A significantportion of the work required by the business logic involves navigating through the persistentobject model. As lead architect on this project, you have chosen JPA over EJB2 entity beans toimplement these persistent objects. You have done this to maximize performance whennavigating through the model. Why does JPA offer better performance for this task?
A.JPA guarantees referential integrity at the object level.
B.JPA allows the application to specify lazy or eager retrievals.
C.JPA simplifies the source code that implements the object model.
D.The guaranteed referential integrity in EJB2 entity beans is expensive.
Correct:B
3.A developer creates a Java web service to be used by consumers in an SOA. This SOA uses aUDDI service registry. How can the developer make the new service available to consumers?A.deploy to the registry using JAXR
B.publish to the registry using JAXR
C.query the registry using JAXRPC
D.target the registry using JAXRPC
Correct:B
4.With the release of a new product line, there has been a significant increase in the volume oftransactions on your web site. You need to scale your application and manage session failover.What is the best option for scalability?
A.add additional web servers and application servers
B.introduce a High Availability pair and utilize sticky sessions
C.add additional application servers and implement DNS round robin
D.add additional application servers and use clustered HttpSession
Correct:D
5.You are asked to architect an SOA solution that leverages Java web services. The architectureneeds to be flexible and allow for the SOAP 1.1, SOAP 1.2, and REST implementations. Which JavaEE technology should you use?
A.JAXP
B.JAXB
C.JAXWS
D.JAXRPC
Correct:C
For Java related information please visit my other blog
http://java-issues-solutions.blogspot.com/2009/02/java-issues-and-solutions-1.html
it will have few java issues and solutions for them.
Subscribe to:
Posts (Atom)
