Given： 11. 15. Which three EL expressions， inserted at ……

多项选择题Whichtwoaretrueaboutauthentication？（）

A.Form-based logins should NOT be used with HTTPS.
B.When using Basic Authentication the target server is NOT authenticated.
C.J2EE compliant web containers are NOT required to support the HTTPS protocol.
D.Web containers are required to support unauthenticated access to unprotected web resources.

多项选择题Given the two security constraints in a deployment descriptor： 101.<security-constraint> 102.<!--a correct url-pattern and http-method goes here-->  103.<auth-constraint><role-name>SALES< role-name>< auth- . <auth-constraint> 104.<role-name>SALES< role-name> 105.< auth-constraint> 106.< security-constraint> 107.<security-constraint> 108.<!--a correct url-pattern and http-method goes here-->  109.<!-- Insert an auth-constraint here --> 110.< security-constraint> If the two security constraints have the same url-pattern and http-method which two inserted independentlyat line 109，will allow users with role names of either SALES or MARKETING to access this resource？（）

A.<auth-constraint/>
B.<auth-constraint><role-name>*</role-name></auth-constraint>
C.<auth-constraint><role-name>ANY</role-name></auth-constraint>
D.<auth-constraint><role-name>MARKETING</role-name></auth-constraint>

单项选择题Whichmechanismrequirestheclienttoprovideitspublickeycertificate？（）

A.HTTP Basic Authentication
B.Form Based Authentication
C.HTTP Digest Authentication
D.HTTPS Client Authentication

单项选择题Whichactivitysupportsthedataintegrityrequirementsofanapplication？（）

A.Using HTTPS as a protocol
B.Using an LDAP security realm
C.Using HTTP Basic authentication
D.Using forms-based authentication

多项选择题Whichtwo classesorinterfacesprovideagetSessionmethod？（）

A.javax.servlet.http.HttpServletRequest
B.javax.servlet.http.HttpSessionContext
C.javax.servlet.http.HttpServletResponse
D.javax.servlet.http.HttpSessionBindingEvent
E.javax.servlet.http.HttpSessionAttributeEvent