Given：
String value = getServletContext（）.getInitParameter（"foo"）； in an HttpServlet and a web applicationdeployment descriptor that contains：
<context-param>
<param-name>foo</param-name>
<param-value>frodo</param-value>
</context-param>
Which two are true？（）

多项选择题Forwhichthreeeventscanwebapplicationeventlistenersberegistered？（）

A.When a session is created
B.After a servlet is destroyed
C.When a session has timed out
D.When a cookie has been created
E.When a servlet has forwarded a request
F.When a session attribute value is changed

多项选择题Your web application uses a simple architecture in which servlets handle requests and then forward to aJSP using a request dispatcher. You need to pass information calculated in the servlet to the JSP for view generation.This information must NOT be accessible to any other servlet，JSP or session in the webapp. Which two techniques can you use to accomplish this goal？（）

A.Add attributes to the session object.
B.Add attributes on the request object.
C.Add parameters to the request object.
D.Use the pageContext object to add request attributes.
E.Add parameters to the JSP’s URL when generating the request dispatcher.

多项选择题A developer chooses to avoid using SingleThreadModel but wants to ensure that data is updated in athread-safe manner. Which two can support this design goal？（）

A.Store the data in a local variable.
B.Store the data in an instance variable.
C.Store the data in the HttpSession object.
D.Store the data in the ServletContext object.
E.Store the data in the ServletRequest object.

单项选择题WhichJSTLcodesnippetcanbeusedtoimportcontentfromanotherwebresource？（）

A.<c：import url="foo.jsp"/>
B.<c：import page="foo.jsp"/>
C.<c：include url="foo.jsp"/>
D.<c：include page="foo.jsp"/>

多项选择题You have been contracted to create a web site for a free dating service. One feature is the ability for oneclient to send a message to another client， which is displayed in the latter client’s private page. Your contract explicitly states that security is a high priority. Therefore， you need to prevent cross-site hacking inwhich one user inserts JavaScript code that is then rendered and invoked when another user views thatcontent. Which two JSTL code snippets will prevent cross site hacking in the scenario above？ （）

A.<c：out>${message}</c：out>
B.<c：out value=’${message}’ />
C.<c：out value=’${message}’ escapeXml=’true’ />
D.<c：out eliminateXml=’true’>${message}</c：out>
E.<c：out value=’${message}’ eliminateXml=’true’ />