Which two statements are true about the security-related tags in a valid Java EE deployment descriptor？（）

单项选择题You web application uses a lot of Java enumerated types in the domain model of the application. Built intoeach enum type is a method， getDisplay（）， which returns a localized， user-oriented string. There are manyuses for presenting enums within the web application， so your manager has asked you to create a customtag that iterates over the set of enum values and processes the body of the tag once for each value； settingthe value into a page- scoped attribute called， enumValue. Here is an example of how this tag is used： 10. 11. 12.${enumValue.display} 13. 14. You have decided to use the Simple tag model to create this tag handler. Which tag handler method willaccomplish this goal？（）

A.
B.
C.
D.

多项选择题Whichtwoaretrueconcerningtheobjectsavailabletodeveloperscreatingtagfiles？（）

A.The session object must be declared explicitly.
B.The request and response objects are available implicitly.
C.The output stream is available through the implicit outStream object.
D.The servlet context is available through the implicit servletContext object.
E.The JspContext for the tag file is available through the implicit jspContext object.

单项选择题You are creating a content management system （CMS） with a web application front-end. The JSP thatdisplays a given document in the CMS has the following general structure： 1. <%-- tag declaration --%> 2. <t：document> ... 11. <t：paragraph>... <t：citation docID=’xyz’  > ...< t：paragraph> ... 99. < t：document> The citation tag must store information in the document tag for the document tag to generate a referencesection at the end of the generated web page. The document tag handler follows the Classic tag model andthe citation tag handler follows the Simple tag model. Furthermore， the citation tag could also be embeddedin other custom tags that could have either the Classic or Simple tag handler model. Which tag handlermethod allows the citation tag to access the document tag？（）

A.public void doTag（） {JspTag docTag = findAncestorWithClass（this， DocumentTag.class）； （（DocumentTag）docTag）.addCitation（this.docID）；}
B.public void doStartTag（） {JspTag docTag = findAncestorWithClass（this， DocumentTag.class）； （（DocumentTag）docTag）.addCitation（this.docID）；}
C.public void doTag（） {. Tag docTag = findAncestor（this， DocumentTag.class）； . （（DocumentTag）docTag）.addCitation（this.docID）；. }
D.public void doStartTag（） {. Tag docTag = findAncestor（this， DocumentTag.class）； . （（DocumentTag）docTag）.addCitation（this.docID）；. }

多项选择题Given： 3.public class MyTagHandler extends TagSupport { 4.public int doStartTag（） { 5.  insert code here 6.  return an int 7.} 8.  more code here ... 18.} There is a single attribute foo in the session scope. Which three code fragments，inserted independently atline 5，return the value of the attribute？（）

A.Object o = pageContext.getAttribute（"foo"）；
B.Object o = pageContext.findAttribute（"foo"）；
C.Object o = pageContext.getAttribute（"foo"，PageContext.SESSION_SCOPE）；
D.HttpSession s = pageContext.getSession（）；Object o = s.getAttribute（"foo"）；

单项选择题You have built your own light-weight templating mechanism. Your servlets， which handle each request，dispatch the request to one of a small set of template JSP pages. Each template JSP controls the layout ofthe view by inserting the header， body， and footer elements into specific locations within the template page.The URLs for these three elements are stored in request scoped variables called， headerURL， bodyURL，and footerURL， respectively. These attribute names are never used for other purposes. Which JSP codesnippet should be used in the template JSP to insert the JSP content for the body of the page？（）

A.<jsp：insert page=’${bodyURL}’ />
B.<jsp：insert file=’${bodyURL}’ />
C.<jsp：include page=’${bodyURL}’ />
D.<jsp：include file=’${bodyURL}’ />
E.<jsp：insert page=’<%= bodyURL %>’ />