J2EE Interview Questions and Answers 17

What is security attributes ?
A set of properties associated with a principal. Security attributes can be associated with a principal by an authentication protocol or by a J2EE product provider or both.

What is security constraint ?
A declarative way to annotate the intended protection of Web content. A security constraint consists of a Web resource collection, an authorization constraint, and a user data constraint.

What is security context ?
An object that encapsulates the shared state information regarding security between two entities.

What is security permission ?
A mechanism defined by J2SE, and used by the J2EE platform to express the programming restrictions imposed on application component developers.

What is security permission set ?
The minimum set of security permissions that a J2EE product provider must provide for the execution of each component type.

What is security policy domain ?
A scope over which security policies are defined and enforced by a security administrator. A security policy domain has a collection of users (or principals), uses a well-defined authentication protocol or protocols for authenticating users (or principals), and may have groups to simplify setting of security policies.

What is security role ?
An abstract logical grouping of users that is defined by the application assembler. When an application is deployed, the roles are mapped to security identities, such as principals or groups, in the operational environment. In the J2EE server authentication service, a role is an abstract name for permission to access a particular set of resources. A role can be compared to a key that can open a lock. Many people might have a copy of the key; the lock doesn't care who you are, only that you have the right key.

What is security technology domain ?
A scope over which the same security mechanism is used to enforce a security policy. Multiple security policy domains can exist within a single technology domain.

What is security view ?
The set of security roles defined by the application assembler.

What is server certificate ?
Used with the HTTPS protocol to authenticate Web applications. The certificate can be self-signed or approved by a certificate authority (CA). The HTTPS service of the Sun Java System Application Server Platform Edition 8 will not run unless a server certificate has been installed.

What is server principal ?
The OS principal that the server is executing as.

What is service element ?
A representation of the combination of one or more Connector components that share a single engine component for processing incoming requests.

What is service endpoint interface ?
A Java interface that declares the methods that a client can invoke on a Web service.

What is servlet ?
A Java program that extends the functionality of a Web server, generating dynamic content and interacting with Web applications using a request-response paradigm.

What is servlet container ?
A container that provides the network services over which requests and responses are sent, decodes requests, and formats responses. All servlet containers must support HTTP as a protocol for requests and responses but can also support additional request-response protocols, such as HTTPS.

What is servlet container, distributed ?
A servlet container that can run a Web application that is tagged as distributable and that executes across multiple Java virtual machines running on the same host or on different hosts.