显示标签为“1Z0-897”的博文。显示所有博文
显示标签为“1Z0-897”的博文。显示所有博文

2013年12月27日星期五

Oracleの1Z0-897認定試験の復習問題集

Oracleの1Z0-897認定試験は全てのIT職員にとって大変重要な試験です。この試験に受かったら、あなたは絶対職場に廃れられることはありません。しかも、昇進と高給も実現できます。Oracleの1Z0-897試験に受かったら成功への鍵を握ったと言った人もいます。これは間違いないです。IT-Passports.comのOracleの1Z0-897試験トレーニング資料はあなたが成功へのショートカットです。このトレーニング資料を持っていたら、成功への道を見つけます。

この情報の時代には、IT業界にとても注目され、この強い情報技術業界にIT人材が得難いです。こうしてOracle認定試験がとても重要になります。でも、この試験がとても難しくてIT者になりたい方が障害になっています。

Oracleの1Z0-897認定試験は現在のIT領域で本当に人気がある試験です。この試験の認証資格を取るのは昇進したい人々の一番良く、最も効果的な選択です。しかも、この試験を通して、あなたも自分の技能を高めて、仕事に役に立つスキルを多くマスターすることができます。そうすれば、あなたはもっと素敵に自分の仕事をやることができ、あなたの優れた能力を他の人に見せることができます。この方法だけであなたはより多くの機会を得ることができます。

IT-Passports.comはIT試験問題集を提供するウエブダイトで、ここによく分かります。最もよくて最新で資料を提供いたします。こうして、君は安心で試験の準備を行ってください。弊社の資料を使って、100%に合格を保証いたします。もし合格しないと、われは全額で返金いたします。IT-Passports.comはずっと君のために最も正確なOracleの1Z0-897試験に関する資料を提供して、君が安心に選択することができます。君はオンラインで無料な練習問題をダウンロードできて、100%で試験に合格しましょう。

IT-Passports.comは受験者に向かって試験について問題を解決する受験資源を提供するサービスのサイトで、さまざまな受験生によって別のトレーニングコースを提供いたします。受験者はIT-Passports.comを通って順調に試験に合格する人がとても多くなのでIT-Passports.comがIT業界の中で高い名声を得ました。

多くのIT業界の友達によるとOracle認証試験を準備することが多くの時間とエネルギーをかからなければなりません。もし訓練班とオンライン研修などのルートを通じないと試験に合格するのが比較的に難しい、一回に合格率非常に低いです。IT-Passports.comはもっとも頼られるトレーニングツールで、Oracleの1Z0-897認定試験の実践テストソフトウェアを提供したり、Oracleの1Z0-897認定試験の練習問題と解答もあって、最高で最新なOracleの1Z0-897認定試験問題集も一年間に更新いたします。

IT-Passports.comが提供したOracleの1Z0-897試験問題と解答が真実の試験の練習問題と解答は最高の相似性があり、一年の無料オンラインの更新のサービスがあり、100%のパス率を保証して、もし試験に合格しないと、弊社は全額で返金いたします。

試験番号:1Z0-897問題集
試験科目:Oracle 「Java Platform, Enterprise Edition 6 Web Services Developer Certified Expert Exam」
問題と解答:全120問

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/1Z0-897.html

NO.1 Which of the following security technology is not covered in Metro project? (Choose one.)
A. WS-Trust
B. WS-SecurityPolicy
C. WS-SecureConversation
D. XACML
Answer: D

Oracle参考書   1Z0-897   1Z0-897認定資格   1Z0-897過去問

NO.2 A developer is creating a web service endpoint using a stateless session EJB for the business logic of
an application. Choose two methods to select role based access control for the business logic ? (Choose
two)
A. Using method-permission element in ejb-jar.xml
B. Using .htaccess file in the application's ear
C. Using <security-role> element in web.xml
D. By specifying security annotations like @RolesAllowed in the EJB class
Answer: A,D

Oracle認定証   1Z0-897認定資格   1Z0-897

NO.3 Which two statements are true about public key digital signatures applied to Web services? (Choose
two)
A. The receiver verifies that the message matches the digital signature using its own private key.
B. The sender creates a digital signature using its own private key and sends that signature along with the
original document.
C. The sender creates a digital signature using its own public key and sends that signature along with the
original document.
D. The receiver verifies that the message matches the digital signature using the sender's public key.
Answer: B,D

Oracle   1Z0-897   1Z0-897   1Z0-897認証試験   1Z0-897

NO.4 Given the resource class fragment:
Choose the code fragment below that would secure access only to the Resource update() method
(Choose one):
A. <security-constraint>
<web-resource-collection>
<url-pattern>/rest</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
B. <security-constraint>
<web-resource-collection>
<url-pattern>/rest</url-pattern>
<http-method>POST</http-method>
</web-resource-collection>
C. <security-constraint>
<web-resource-collection>
<url-pattern>/rest/id</url-pattern>
<http-method>POST</http-method>
<http-method>GET</http-method>
</web-resource-collection>
D. <security-constraint>D.<security-constraint>
<web-resource-collection>
<url-pattern>/id</url-pattern>
<http-method>POST</http-method>
</web-resource-collection>
Answer: B

Oracle   1Z0-897認定試験   1Z0-897認定資格   1Z0-897過去問   1Z0-897

NO.5 Given the JAX-RS root resource class fragment:
Choose the statement that best describes the configuration that would be required to support the access
control constraint shown:
A. No further configuration is required - the JavaEE runtime will pick up the security constraint and
configure the web container to match.
B. The developer will have to configure the web container to require authenticated access to the URLs
corresponding to this resource, so the proper information can be propagated to the EJB container.
C. The developer will have to turn on authentication in the web container configuration file, so that all
incoming requests are authenticated in order to be processed.
D. The developer will have to configure the web container to require authenticated access to the URLs
corresponding to this resource, and then map web-tier roles to ejb-tier roles, since the JAXRS and EJB
runtimes cannot use the same set of roles.
Answer: B

Oracle   1Z0-897   1Z0-897認定証

NO.6 In designing the security for your enterprise application with multiple Web services, you don't want that
each of the services handle user authentication by itself. Then which of the following you can use in your
design?
A. enable secure conversation for each service
B. a centralized Policy Decision Point (PDP) via XACML
C. a Security Token Service (STS)
D. use transport level security with SSL
Answer: C

Oracle   1Z0-897   1Z0-897練習問題   1Z0-897練習問題

NO.7 Choose the option that best describe the deployer's choices, when deploying an EJB that is also
exposed as a RESTful web service using JAX-RS (Choose one):
A. The EJB can only be deployed to a web container, since RESTful access to the EJB requires a web
container to support the HTTP interaction needed.
B. The EJB can be deployed to any EJB or web container that would support local references to the EJB
from the JAX-RS runtime in the ejb container.
C. The EJB can be deployed to any EJB or web container that would support local references to the EJB
from the JAX-RS runtime in the web container.
D. The EJB can be deployed to an EJB or web container that is visible to the JAX-RS runtime, even on an
application server separate from the JAX-RS runtime, since EJBs support local or remote interactions via
RMI.
Answer: C

Oracle過去問   1Z0-897問題集   1Z0-897

NO.8 A Web service needs to encrypt certain SOAP headers when responding. Which statement about this
encryption is true?
A. The Web service runtime is the appropriate place for such encryption.
B. The Web service business logic is the appropriate place for such encryption.
C. Either the Web service business logic or runtime is appropriate for such encryption.
D. Neither the Web service business logic nor runtime is appropriate for such encryption.
E. Transport level security protocol like SSL should be used to meet the requirements without code
changes.
Answer: A

Oracle参考書   1Z0-897   1Z0-897   1Z0-897問題集

NO.9 A developer wants to use WebServiceContext in the web service endpoint. Which of the following is
the correct way to get WebServiceContext object ? (Choose one)
A. @WebService
public class MyService
{
@WebServiceContext
WebServiceContext ctxt;
public String echo(String str)
{
..
.
}
B. @WebService
public class MyService
{
WebServiceContext ctxt;
public String echo(String str) {
ctxt = jndi.lookup("java:com/env/WebServiceContext");
}
C. @WebService
public class MyService
{
@Inject
WebServiceContext ctxt;
public String echo(String str)
{
...
}
D. @WebService
public class MyService
{
@Resource
WebServiceContext ctxt;
public String echo(String str)
{
..
.
}
Answer: D

Oracle   1Z0-897   1Z0-897練習問題   1Z0-897

NO.10 A developer creates the following web service:
Assuming that he packages the class in a war file without deployment descriptors, the web service is
hosted by a EE container relative to module context at ? (Choose one)
A. "/Invoice"
B. "/InvoicePort"
C. "/InvoiceService"
D. "/InvoiceWebService"
Answer: C

Oracle   1Z0-897認定証   1Z0-897認証試験   1Z0-897参考書

NO.11 A developer creates a Web service for his company's inventory service. He uses servlet container to
deploy the web service and wants to enable basic authentication for all web service invocations.
Where does the developer configure security requirements for the above case?
A. sun-jaxws.xml
B. web.xml
C. webservices.xml
D. domain.xml
Answer: B

Oracle認定証   1Z0-897   1Z0-897   1Z0-897

NO.12 An organization has business logic implemented in EJB components. Current clients use
container-managed, role-based security to access the business logic using RMI. Management has
determined that the business logic must be made available to non-RMI clients using a Web service.
Which container-managed Web service security mechanism would the development team?use to allow
Web service clients to use the current security model? (Choose one)
A. XKMS
B. XACML
C. XML Digital Signature
D. HTTP Basic Authentication
E. annotations mapped to the JAX-WS runtime
Answer: D

Oracle   1Z0-897問題集   1Z0-897過去問

NO.13 In the code fragment below, the client will use os to upload data to the web service provider.
Choose the statement that must be placed in line 5, to ensure this fragment works as intended. (Choose
one)
A. connection.setDoOutput(true);
B. connection.setAllowUserInteraction(true);
C. connection.setIfModifiedSince(new Date().getTime());
D. connection.setUseCaches(false);
Answer: A

Oracle   1Z0-897認証試験   1Z0-897練習問題   1Z0-897   1Z0-897   1Z0-897認定資格

NO.14 An airline built and deployed a back-end application to manage reservations. To support
interoperability with as large a base of standalone client applications as possible, the services provided by
this back-end application are exposed as XML-based restful web services. Management just added a new
requirement that AJAX-based web application clients be supported, too. One of the developers suggested
that it is enough to extend the existing application to support both XML-based and JSON-based restful
web services. Assuming the developer is correct, choose the sentence that best describes an attempt to
introduce this ability as this developer suggests (Choose one):
A. The attempt will fail, because JAX-RS does not support both XML- and JSON- based restful services in
parallel.
B. The attempt will be trivial to implement, since JAX-RS just needs for the application to specify that both
XML- and JSON-based interaction will be supported.
C. The attempt can succeed, but it will require a significant amount of new code, since JAX-RS does
support both XML- and JSON-based interaction - but not single resource can support both kinds of
interaction simultaneously.
D. The attempt will fail, because there is more to the difference between XML-based and JSON-based
interactions than just the data representation used.
Answer: B

Oracle   1Z0-897   1Z0-897過去問   1Z0-897認定試験   1Z0-897

NO.15 Which security technologies are not included in WS-Security?
A. encryption
B. handshake for credential exchange and session establishment
C. security tokens
D. digital signatures
Answer: B

Oracle認証試験   1Z0-897   1Z0-897認定試験   1Z0-897   1Z0-897参考書

NO.16 An automobile manufacturer publishes a Web service for use by their suppliers. The manufacturer has
stringent security requirements that require suppliers to verify their identity. Data integrity and
confidentiality must be maintained between the client and the server. Which two meet all of these
requirements? (Choose two.)
A. X.509 and XKMS
B. XACML and XKMS
C. SSL and mutual authentication
D. XML Encryption and XML Digital Signature
E. Private network and XML Signature
Answer: C,D

Oracle   1Z0-897   1Z0-897   1Z0-897過去問   1Z0-897

NO.17 A company is refactoring an existing website to use Web services clients. The application retrieves lists
of parts and displays them to the users in a browser window. Previously, the data was stored as files on
the web server and, in order to access the files, the user would simply click on a hyperlink. Now the data
must be dynamically generated via a service that another developer has created. They want the easiest
way to refactor their website to use Web services. Which three client-side technologies should they use.?
(Choose three.)
A. SOAP
B. REST
C. Javascript
D. XML
E. JSON
F. JAVA
Answer: B,C,E

Oracle   1Z0-897   1Z0-897

NO.18 An automobile manufacturer publishes a Web service for use by their suppliers. The manufacturer has
stringent security requirements that require suppliers to verify their identity. Data integrity and
confidentiality must be maintained between the client and the server. Which two technologies can be used
to meet the requirements? (Choose two)
A. XACML and XKMS
B. SSL with mutual authentication
C. Message level security with WS-Security
D. Private network and XML Signature
Answer: B,C

Oracle認証試験   1Z0-897過去問   1Z0-897問題集   1Z0-897参考書

NO.19 A developer needs to write a Web service that supports user sessions that timeout after 120 seconds.
Which configuration file is correct for the developer use? (Choose one)
A. web.xml
B. server.xml
C. ejb-jar.xml
D. service-config.xml
Answer: A

Oracle問題集   1Z0-897認定証   1Z0-897   1Z0-897参考書

NO.20 Which of the following WS-Security token profiles is not supported in Metro?
A. X509 Token Profile
B. Kerberos Token Profile
C. SAML Token Profile
D. SOAP with Attachments (SWA) profile
E. Right Expression Language (REL) Token Profile
Answer: E

Oracle   1Z0-897   1Z0-897   1Z0-897認定証   1Z0-897   1Z0-897問題集

試験の準備をするためにIT-Passports.comのOracleの1Z0-897試験トレーニング資料を買うのは冒険的行為と思ったとしたら、あなたの人生の全てが冒険なことになります。一番遠いところへ行った人はリスクを背負うことを恐れない人です。また、IT-Passports.comのOracleの1Z0-897試験トレーニング資料が信頼できるのは多くの受験生に証明されたものです。IT-Passports.comのOracleの1Z0-897試験トレーニング資料を利用したらきっと成功できますから、IT-Passports.comを選ばない理由はないです。

2013年9月16日星期一

Oracleの1Z0-897認定試験の最新教育資料

IT-Passports.comは頼りが強い上にサービスもよくて、もし試験に失敗したら全額で返金いたしてまた一年の無料なアップデートいたします。

IT-Passports.comは多くの認証業界の評判を持っています。それは我々はOracleの1Z0-897問題集や1Z0-897スタディガイドや1Z0-897問題と解答がたくさんありますから。現在のサイトで最もプロなITテストベンダーとして我々は完璧なアフターサービスを提供します。全てのお客様に追跡サービスを差し上げますから、あなたが買ったあとの一年間で、弊社は全てのお客様に問題集のアップグレードを無料に提供します。その間で認定テストセンターのOracleの1Z0-897試験問題は修正とか表示されたら、無料にお客様に保護して差し上げます。Oracleの1Z0-897試験問題集はIT-Passports.comのIT領域の専門家が心を込めて研究したものですから、IT-Passports.comのOracleの1Z0-897試験資料を手に入れると、あなたが美しい明日を迎えることと信じています。

IT-Passports.comはもっぱらITプロ認証試験に関する知識を提供するのサイトで、ほかのサイト使った人はIT-Passports.comが最高の知識源サイトと比較しますた。IT-Passports.comの商品はとても頼もしい試験の練習問題と解答は非常に正確でございます。

1Z0-897はOracleの一つ認証試験として、もしOracle認証試験に合格してIT業界にとても人気があってので、ますます多くの人が1Z0-897試験に申し込んで、1Z0-897試験は簡単ではなくて、時間とエネルギーがかかって用意しなければなりません。

しかし、1Z0-897試験は簡単ではありません。専門的な知識が必要で、もしあなたはまだこの方面の知識を欠かれば、IT-Passports.comは君に向ける知識を提供いたします。IT-Passports.comの専門家チームは彼らの知識や経験を利用してあなたの知識を広めることを助けています。そしてあなたに1Z0-897試験に関するテスト問題と解答が分析して差し上げるうちにあなたのIT専門知識を固めています。

試験番号:1Z0-897問題集
試験科目:Oracle 「Java Platform, Enterprise Edition 6 Web Services Developer Certified Expert Exam」
問題と解答:全120問

我々は受験生の皆様により高いスピードを持っているかつ効率的なサービスを提供することにずっと力を尽くしていますから、あなたが貴重な時間を節約することに助けを差し上げます。IT-Passports.com Oracleの1Z0-897試験問題集はあなたに問題と解答に含まれている大量なテストガイドを提供しています。インターネットで時勢に遅れない1Z0-897勉強資料を提供するというサイトがあるかもしれませんが、IT-Passports.comはあなたに高品質かつ最新のOracleの1Z0-897トレーニング資料を提供するユニークなサイトです。IT-Passports.comの勉強資料とOracleの1Z0-897に関する指導を従えば、初めてOracleの1Z0-897認定試験を受けるあなたでも一回で試験に合格することができます。

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/1Z0-897.html

NO.1 Choose the option that best describe the deployer's choices, when deploying an EJB that is also
exposed as a RESTful web service using JAX-RS (Choose one):
A. The EJB can only be deployed to a web container, since RESTful access to the EJB requires a web
container to support the HTTP interaction needed.
B. The EJB can be deployed to any EJB or web container that would support local references to the EJB
from the JAX-RS runtime in the ejb container.
C. The EJB can be deployed to any EJB or web container that would support local references to the EJB
from the JAX-RS runtime in the web container.
D. The EJB can be deployed to an EJB or web container that is visible to the JAX-RS runtime, even on an
application server separate from the JAX-RS runtime, since EJBs support local or remote interactions via
RMI.
Answer: C

Oracle   1Z0-897過去問   1Z0-897練習問題   1Z0-897認定資格

NO.2 A developer wants to use WebServiceContext in the web service endpoint. Which of the following is
the correct way to get WebServiceContext object ? (Choose one)
A. @WebService
public class MyService
{
@WebServiceContext
WebServiceContext ctxt;
public String echo(String str)
{
..
.
}
B. @WebService
public class MyService
{
WebServiceContext ctxt;
public String echo(String str) {
ctxt = jndi.lookup("java:com/env/WebServiceContext");
}
C. @WebService
public class MyService
{
@Inject
WebServiceContext ctxt;
public String echo(String str)
{
...
}
D. @WebService
public class MyService
{
@Resource
WebServiceContext ctxt;
public String echo(String str)
{
..
.
}
Answer: D

Oracle   1Z0-897   1Z0-897問題集   1Z0-897

NO.3 A Web service needs to encrypt certain SOAP headers when responding. Which statement about this
encryption is true?
A. The Web service runtime is the appropriate place for such encryption.
B. The Web service business logic is the appropriate place for such encryption.
C. Either the Web service business logic or runtime is appropriate for such encryption.
D. Neither the Web service business logic nor runtime is appropriate for such encryption.
E. Transport level security protocol like SSL should be used to meet the requirements without code
changes.
Answer: A

Oracle参考書   1Z0-897   1Z0-897認定資格   1Z0-897練習問題   1Z0-897参考書

NO.4 A developer creates the following web service:
Assuming that he packages the class in a war file without deployment descriptors, the web service is
hosted by a EE container relative to module context at ? (Choose one)
A. "/Invoice"
B. "/InvoicePort"
C. "/InvoiceService"
D. "/InvoiceWebService"
Answer: C

Oracle   1Z0-897   1Z0-897   1Z0-897   1Z0-897認証試験

NO.5 A developer is creating a web service endpoint using a stateless session EJB for the business logic of
an application. Choose two methods to select role based access control for the business logic ? (Choose
two)
A. Using method-permission element in ejb-jar.xml
B. Using .htaccess file in the application's ear
C. Using <security-role> element in web.xml
D. By specifying security annotations like @RolesAllowed in the EJB class
Answer: A,D

Oracle   1Z0-897認定試験   1Z0-897   1Z0-897過去問

NO.6 Given the JAX-RS root resource class fragment:
Choose the statement that best describes the configuration that would be required to support the access
control constraint shown:
A. No further configuration is required - the JavaEE runtime will pick up the security constraint and
configure the web container to match.
B. The developer will have to configure the web container to require authenticated access to the URLs
corresponding to this resource, so the proper information can be propagated to the EJB container.
C. The developer will have to turn on authentication in the web container configuration file, so that all
incoming requests are authenticated in order to be processed.
D. The developer will have to configure the web container to require authenticated access to the URLs
corresponding to this resource, and then map web-tier roles to ejb-tier roles, since the JAXRS and EJB
runtimes cannot use the same set of roles.
Answer: B

Oracle   1Z0-897   1Z0-897練習問題   1Z0-897認定資格   1Z0-897

NO.7 Which two statements are true about public key digital signatures applied to Web services? (Choose
two)
A. The receiver verifies that the message matches the digital signature using its own private key.
B. The sender creates a digital signature using its own private key and sends that signature along with the
original document.
C. The sender creates a digital signature using its own public key and sends that signature along with the
original document.
D. The receiver verifies that the message matches the digital signature using the sender's public key.
Answer: B,D

Oracle認定証   1Z0-897   1Z0-897過去問   1Z0-897過去問   1Z0-897   1Z0-897

NO.8 A developer creates a Web service for his company's inventory service. He uses servlet container to
deploy the web service and wants to enable basic authentication for all web service invocations.
Where does the developer configure security requirements for the above case?
A. sun-jaxws.xml
B. web.xml
C. webservices.xml
D. domain.xml
Answer: B

Oracle参考書   1Z0-897認定資格   1Z0-897   1Z0-897   1Z0-897参考書   1Z0-897

NO.9 An automobile manufacturer publishes a Web service for use by their suppliers. The manufacturer has
stringent security requirements that require suppliers to verify their identity. Data integrity and
confidentiality must be maintained between the client and the server. Which two meet all of these
requirements? (Choose two.)
A. X.509 and XKMS
B. XACML and XKMS
C. SSL and mutual authentication
D. XML Encryption and XML Digital Signature
E. Private network and XML Signature
Answer: C,D

Oracle過去問   1Z0-897   1Z0-897参考書   1Z0-897認定証   1Z0-897

NO.10 A company is refactoring an existing website to use Web services clients. The application retrieves lists
of parts and displays them to the users in a browser window. Previously, the data was stored as files on
the web server and, in order to access the files, the user would simply click on a hyperlink. Now the data
must be dynamically generated via a service that another developer has created. They want the easiest
way to refactor their website to use Web services. Which three client-side technologies should they use.?
(Choose three.)
A. SOAP
B. REST
C. Javascript
D. XML
E. JSON
F. JAVA
Answer: B,C,E

Oracle認定試験   1Z0-897参考書   1Z0-897

NO.11 A developer needs to write a Web service that supports user sessions that timeout after 120 seconds.
Which configuration file is correct for the developer use? (Choose one)
A. web.xml
B. server.xml
C. ejb-jar.xml
D. service-config.xml
Answer: A

Oracle   1Z0-897   1Z0-897練習問題

NO.12 In the code fragment below, the client will use os to upload data to the web service provider.
Choose the statement that must be placed in line 5, to ensure this fragment works as intended. (Choose
one)
A. connection.setDoOutput(true);
B. connection.setAllowUserInteraction(true);
C. connection.setIfModifiedSince(new Date().getTime());
D. connection.setUseCaches(false);
Answer: A

Oracle   1Z0-897認定資格   1Z0-897認定証   1Z0-897   1Z0-897過去問

NO.13 Which security technologies are not included in WS-Security?
A. encryption
B. handshake for credential exchange and session establishment
C. security tokens
D. digital signatures
Answer: B

Oracle   1Z0-897   1Z0-897参考書   1Z0-897

NO.14 Which of the following WS-Security token profiles is not supported in Metro?
A. X509 Token Profile
B. Kerberos Token Profile
C. SAML Token Profile
D. SOAP with Attachments (SWA) profile
E. Right Expression Language (REL) Token Profile
Answer: E

Oracle   1Z0-897   1Z0-897

NO.15 Which of the following security technology is not covered in Metro project? (Choose one.)
A. WS-Trust
B. WS-SecurityPolicy
C. WS-SecureConversation
D. XACML
Answer: D

Oracle過去問   1Z0-897   1Z0-897認定資格   1Z0-897   1Z0-897認定資格

NO.16 In designing the security for your enterprise application with multiple Web services, you don't want that
each of the services handle user authentication by itself. Then which of the following you can use in your
design?
A. enable secure conversation for each service
B. a centralized Policy Decision Point (PDP) via XACML
C. a Security Token Service (STS)
D. use transport level security with SSL
Answer: C

Oracle   1Z0-897参考書   1Z0-897練習問題   1Z0-897認定資格   1Z0-897

NO.17 An organization has business logic implemented in EJB components. Current clients use
container-managed, role-based security to access the business logic using RMI. Management has
determined that the business logic must be made available to non-RMI clients using a Web service.
Which container-managed Web service security mechanism would the development team?use to allow
Web service clients to use the current security model? (Choose one)
A. XKMS
B. XACML
C. XML Digital Signature
D. HTTP Basic Authentication
E. annotations mapped to the JAX-WS runtime
Answer: D

Oracle   1Z0-897   1Z0-897認定資格

NO.18 Given the resource class fragment:
Choose the code fragment below that would secure access only to the Resource update() method
(Choose one):
A. <security-constraint>
<web-resource-collection>
<url-pattern>/rest</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
B. <security-constraint>
<web-resource-collection>
<url-pattern>/rest</url-pattern>
<http-method>POST</http-method>
</web-resource-collection>
C. <security-constraint>
<web-resource-collection>
<url-pattern>/rest/id</url-pattern>
<http-method>POST</http-method>
<http-method>GET</http-method>
</web-resource-collection>
D. <security-constraint>D.<security-constraint>
<web-resource-collection>
<url-pattern>/id</url-pattern>
<http-method>POST</http-method>
</web-resource-collection>
Answer: B

Oracle認定試験   1Z0-897   1Z0-897認定資格

NO.19 An automobile manufacturer publishes a Web service for use by their suppliers. The manufacturer has
stringent security requirements that require suppliers to verify their identity. Data integrity and
confidentiality must be maintained between the client and the server. Which two technologies can be used
to meet the requirements? (Choose two)
A. XACML and XKMS
B. SSL with mutual authentication
C. Message level security with WS-Security
D. Private network and XML Signature
Answer: B,C

Oracle   1Z0-897認定資格   1Z0-897   1Z0-897認定資格   1Z0-897

NO.20 An airline built and deployed a back-end application to manage reservations. To support
interoperability with as large a base of standalone client applications as possible, the services provided by
this back-end application are exposed as XML-based restful web services. Management just added a new
requirement that AJAX-based web application clients be supported, too. One of the developers suggested
that it is enough to extend the existing application to support both XML-based and JSON-based restful
web services. Assuming the developer is correct, choose the sentence that best describes an attempt to
introduce this ability as this developer suggests (Choose one):
A. The attempt will fail, because JAX-RS does not support both XML- and JSON- based restful services in
parallel.
B. The attempt will be trivial to implement, since JAX-RS just needs for the application to specify that both
XML- and JSON-based interaction will be supported.
C. The attempt can succeed, but it will require a significant amount of new code, since JAX-RS does
support both XML- and JSON-based interaction - but not single resource can support both kinds of
interaction simultaneously.
D. The attempt will fail, because there is more to the difference between XML-based and JSON-based
interactions than just the data representation used.
Answer: B

Oracle   1Z0-897過去問   1Z0-897認定試験   1Z0-897   1Z0-897

IT-Passports.comにIT業界のエリートのグループがあって、彼達は自分の経験と専門知識を使ってOracle 1Z0-897認証試験に参加する方に対して問題集を研究続けています。