【Java】-NO.20.Exam.1.Java.1.001- 【1z0-807】- OCEA

1.0.0 Summary

Tittle：【Java】-NO.20.Exam.1.Java.1.001-【1z0-807】

Style：EBook

Series：Java

Since：2017-10-22

End：....

Total Hours：...

Degree Of Diffculty：2

Degree Of Mastery：2

Practical Level：2

Desired Goal：2

Archieve Goal：....

Gerneral Evaluation：...

Writer:kingdelee

Related Links：

http://www.cnblogs.com/kingdelee/

Question No : 1
Your company requires all its developers to use a well-specified set of exception classes to model several common error conditions, many of the which are specific to its business.
These exception classes are centrally maintained and come packaged in a library (a JAR file). The application you are developing needs to report a number of error conditions covered by this library to remote clients.
Which paring of component type and remote access technology enables client applications to use the predefined exceptions as part of their natural programming model?
A. Servlet accessed using HTTP
B. Entity bean accessed using web services
C. Stateless session bean accessed using Remote Method Invocation (RMI)
D. Message-driven bean accessed using Java Message Service (JMS) queue

您的公司要求所有的开发人员使用一组指定的异常类来建模几个常见的错误条件，其中许多是特定于其业务的。
这些异常类被集中维护，并打包在一个库中(一个JAR文件)。
您正在开发的应用程序需要向远程客户报告该库所覆盖的许多错误条件。
组件类型和远程访问技术的减少使客户端应用程序能够使用预定义的异常作为其自然编程模型的一部分?

Servlet使用HTTP访问
使用web服务访问的实体bean
使用远程方法调用(RMI)访问的无状态会话bean
使用Java消息服务(JMS)队列访问的消息驱动bean

Answer: C

No.2
An investment company has purchased a number of small online business referral systems that appeal to various niche demographics. The company wants to bring these networks together in hopes of finding a broad, single theme and brand image for these groups before they can do that, they need to get the users communicating with outside their current networks.

Which Web Services pattern would you recommend they consider in building a scheme to accommodate this communication?

A. Asynchronous Interactions
B. PAOS Interactions
C. Web Services Broker
D. JMS Bridge

一家投资公司已经购买了许多小型在线商务推荐系统，这些系统可以吸引不同的细分市场。
该公司希望将这些网络整合在一起，希望在他们能够做到这一点之前，为这些群体找到一个广泛的、单一的主题和品牌形象，他们需要让用户与他们当前的网络之外的人进行交流。
在构建一个方案以适应这种通信时，您建议他们考虑哪种Web服务模式?

Answer：A
异步交互

No.3
A Hot Potato anti pattern can arise from misuse of which technology combination?

A. Bean Validation with JSF Managed Beans
B. Messaging in the Business Tier
C. JNDI Lookups with Global Java Naming
D. JPA with the Web Tier

一个热土豆反模式可能会因滥用技术组合而产生?

Answer: B
在业务层的消息传递

词汇：
business referral：商业中介/相关

Question No : 4

You are the architect of an existing project. Making changes to one component frequently requires making changes to many other components.
Which action would reduce future maintenance costs?

A. Redesign the configuration and deployment.
B. Add an abstraction layer between the servlets and the EJB components.
C. Convert all stateful EJB components to stateless EJB components.
D. Expose the existing EJB components as web services.

您是现有项目的架构师。
对一个组件进行更改通常需要对许多其他组件进行更改。
哪一行动会降低未来的维护成本?
A.重新设计配置和部署。
B.在servlet和EJB组件之间添加一个抽象层。
C.将所有有状态的EJB组件转换为无状态EJB组件。
D.将现有的EJB组件公开为web服务。

Answer: B
B.在servlet和EJB组件之间添加一个抽象层。

Question No : 5

Your consulting company has been asked to enhance an existing application.
The current application is a two-tier system in which all the business logic is located in thick clients.
You are considering a solution that would involve moving the business logic into the server's database In the form of stored procedures.
Which statement is an expected outcome of your proposed solution?

A. It will improve the scalability of the system.
B. It will improve the manageability of the system.
C. It will recline the amount of traffic on the network.
D. It will, in effect, turn the application into a three-tier system.

您的咨询公司已被要求改进现有的应用程序。
当前的应用程序是一种两层系统，其中所有业务逻辑都位于粗客户机中。
您正在考虑一个解决方案，该解决方案涉及将业务逻辑以存储过程的形式将业务逻辑转移到服务器的数据库中。
你提出的解决方案的预期结果是什么?

答:它将提高系统的可伸缩性。
它将提高系统的可管理性。
它将会使网络上的流量重新倾斜。
实际上，它将把应用程序转变为一个三层系统。

a two-tier system, business logic is located in thick clients。
moving the business logic into the server's databses In the form of stored procedures。

-- 两层，业务逻辑都堆在一起，使用存储结构存储业务逻辑，减轻客户端控制与逻辑混乱的结构，便于业务逻辑的管理。

Answer: B

Question No : 6

A company manufactures widgets for sale to distribution. Distributors call this company when they want to order more widgets.
The company wants the distributors to send orders using XML documents over the Internet to reduce the number of data entry personnel needed.
It has no control over the distributors technologies. The company does not want the Orders to impact the performance of other users.
You have been assigned the task of designing a new API.

Which method do you use?

A. Design the API as a Java Message Service (JMS) queue.
B. Design the API as an Remote Method Invocation (RMI) interface.
C. Design the API as a synchronous web service.
D. Design the API as an asynchronous web service.

一家公司生产销售到销售的小部件。
当经销商想要订购更多的小部件时，他们会打电话给这个公司。
该公司希望分销商在互联网上使用XML文档发送订单，以减少所需数据录入人员的数量。
它无法控制分销商技术。
该公司不希望这些订单影响其他用户的表现。
您已经被分配了设计一个新的API的任务。
你用的是哪种方法?

no control over the distributors technologies.
-- JMS 和 RMI都必须是Java端，所以排除，Web Service兼容客户端的任何语言。
not want the Orders to impact the performance of other users。
不想影响对方性能，异步不会导致对方阻塞等待。

Answer: D

Question No : 7

You have been recruited by an online retailer of footwear to conduct a review of their online systems.
Your primary Finding is that the development team has implemented duplicated complex business logic as Java scripts directly into the JSPs, causing performance, scalability, and maintainability issues.
Which two design patterns would you select to improve the current code base?
A. View Helper
B. Front Controller
C. Composite View
D. Service-to-Worker
E. Business Delegate

你已经被一家在线零售商招募来对他们的在线系统进行评估。
您的主要发现是，开发团队已经将重复的复杂业务逻辑作为Java脚本直接应用到jsp中，从而导致性能、可伸缩性和可维护性问题。
您将选择哪两种设计模式来改进当前的代码库?

Answer: B,D

duplicated complex business logic as Java scripts directly into the JSPs

View Helper

View Helper：A presentation tier pattern for a component that provides ancillary functions, such as constructing an intermediate data model,that are required by view components.
Views can also use view helpers to help render pages and get access to business logic through business delegates for situations where service dispatching is not need.

View Helper:
Simplify access to model state and data access logic
Front Controller:
centralize application request processing
service to worker:
Similar to Dispatcher View Pattern, except that the front controller takes more responsibility for view selection and business process invocation
composite view：
Separately manage layout and content of multiple composed views
Business Delegate：
Reduce coupling between Web and Enterprise JavaBeans tiers

Question No : 8

A successful web application is used by over two hundred thousand users. Due to this substantial load, the database is over bridged and fails frequently.
All data, included critical user records and temporary session data, is stored in the database. Because of resource constraints, a new database system cannot be installed
Which change will reduce the load on the database?

A. Creating more entity beans to optimize interaction wild the database
B. Refactoring the web application to use DAOs to communicate with the database
C. Refactoring the web application to store temporary session data on the web servers
D. Adding more web servers to the web tier to distribute the load and reduce the number of transactions on the database.

一个成功的web应用程序被超过20万的用户使用。
由于这一巨大的负载，数据库在桥接之上，并且经常失败。
所有数据，包括关键用户记录和临时会话数据，都存储在数据库中。
由于资源限制，无法安装新的数据库系统
哪些更改会减少数据库上的负载?

Answer: C

Question No : 9

MedLabML is a startup firm that moves patient data between different care providers to provide a “single patient view”.
They use a B2B system to exchange electronic business document with their key suppliers.
They are seeking your advice about standards to review for improving their message-level security.
Which standard or API would you recommend they read?

A. SAML 1.1
B. Web Service Interoperability Technology
C. XML Signature
D. SSL

MedLabML是一家初创公司，它在不同的护理提供者之间移动患者数据，提供“单一的患者视角”。
他们使用B2B系统与他们的主要供应商交换电子商务文档。
他们正在寻求您关于标准的建议，以改进他们的消息级别安全性。
你推荐他们阅读哪些标准或API?

Answer: B
Question No : 10

You have been tasked with improving the availability of an existing three tier application.
What is your first stop in evaluating what changes should be made to the architecture to achieve the goal?
A. Monitor network traffic between tiers.
B. Separate presentation from business logic.
C. Identify and document all single points of failure.
D. Cluster the presentation tier without session replication.
Answer: C

您的任务是改进现有的三层应用程序的可用性。
您的第一站是什么，评估应该对体系结构进行哪些更改以实现目标?

监视层之间的网络流量。
从业务逻辑中分离出来。
识别并记录所有单点故障。
在没有会话复制的情况下集群表示层。

Question No : 11
While analyzing an existing web application, you observe the following issues in the source code:
Duplicate control code is scattered throughout various view.
Business and presentation logic are mixed within these view.
The next phase of the project involves refactoring the existing code to address these two issues.
Which design pattern, if employed in the refactoring exercise, would most directly address the two issues?
A. Service to Worker
B. Dispatcher view
C. DAO
D. Composite View

在分析现有web应用程序时，您可以在源代码中观察以下问题:
复制控制代码分散在不同的视图中。
业务和表示逻辑在这些视图中是混合的。
项目的下一个阶段涉及重构现有的代码以解决这两个问题。
如果在重构实践中使用了哪种设计模式，那么最直接地解决这两个问题呢?

Service to Worker is a MVC model.

Answer: A

Question No : 12
You are using an open source integration framework in your project.
However, key interfaces do not explicitly define several strange conditions you have repeatedly seen while testing.
Which option is the name given to the anti pattern described above?

A. Composite View
B. Leaky Abstraction
C. Asynchronous Interaction
D. Golden Hammer

Explanation: All non-trivial abstractions, to some degree, are leaky.
An abstraction that works most of the time, but where a detail of the underlying complexity cannot be ignored,
thus leaking complexity out of the abstraction back into the software that uses the abstraction.

在您的项目中，您正在使用一个开放源码集成框架。
但是，关键的接口并没有明确定义您在测试时反复看到的几个奇怪的条件。
哪个选项是上面描述的反模式的名称?

说明:在某种程度上，所有非平凡的抽象都是有漏洞的。
在大多数情况下都可以使用的抽象概念，但是在其中，底层复杂性的细节不能被忽略，
因此，将抽象从抽象中泄漏出来，回到使用抽象的软件中。

在测试时总会反复看到几个奇怪的条件在主要接口中没有明确定义。
反模式：避免使用的设计方案
Leaky Abstraction：抽象向用户暴露了本应隐藏的其底层实现的细节和限制
Golden Hammer：认为自己最喜欢的解决方案是到处通用的

Answer: B

Question No : 13

Which two statements are true about security strategies at the message level?

A. Messages are secured during transport and after arrival at their destination
B. Each portion of a compound message is secured.
C. SSL is required to ensure authenticity, integrity, and confidentiality.
D. Message attachments are secured without the need for a dedicated API.
E. Security is dependent on the application environment or the transport protocol.

对于消息级别的安全策略，哪两种说法是正确的?

消息在传输期间和到达目的地后得到保护。
复合消息的每一部分都是安全的。
SSL是必需的，以确保真实性、完整性和机密性。
消息附件是安全的，不需要专门的API。
安全性依赖于应用程序环境或传输协议。

这个题没有明确，但应该是指WebService的消息。
所以选AD没有问题。

Answer: A,D

Question No : 14

Which two features are supported by the Java Authentication and Authorization Service(JAAS) API?
A. Single sign on
B. Secure network connections
C. Configurable access control policies
D. Web services security
E. Message encryption and key generation

Java认证和授权服务(JAAS)API支持哪两个特性?

单点登录
安全网络连接
可配置的访问控制策略
Web服务安全
消息加密和密钥生成

JAAS基本支持SSO和安全访问控制策略。

Answer: A,C

Question No : 15

Your development team wants to use Google Guice.
A previous architect assigned this request a low priority, citing the complexity of integration and no compelling benefits statements from the requesting team.
The team claims that their colleagues have achieved the integration using a pattern.
This pattern reduced the level of difficulty and risk and did not require vendor support.
Which pattern fits this description?
A. Context Holder
B. Service Starter
C. Dependency Injection Extender
D. Bean Locator
Reference: https://code.google.com/p/peaberry/

您的开发团队希望使用Google Guice。
以前的架构师将此请求分配为较低的优先级，理由是集成的复杂性，以及需求团队没有令人信服的利益声明。
该团队声称，他们的同事使用一种模式实现了集成。
这种模式降低了难度和风险，并且不需要供应商的支持。
哪种模式符合这种描述?

reduced the level of difficulty and risk and did not require vendor support.
Dependency Injection Extender

Answer: C

Question No : 16

Which statements are true about Java integration technologies?
A. Remote Method Invocation (RMI) helps to connect subsystems in a loosely coupled manner.
B. Java Message Service (JMS) helps in synchronous messaging between Java and non-Java systems.
C. JMS helps to broadcast messages to multiple Java-based receivers.
D. Java Connector Architecture (JCA) helps to integrate with heterogeneous legacy enterprise information systems.

远程方法调用(RMI)帮助以松散耦合的方式连接子系统。
Java消息服务(JMS)帮助Java和非Java系统之间的同步消息传递。
JMS帮助将消息广播到多个基于java的接收方。
Java连接器体系结构(JCA)有助于与异构的遗留企业信息系统集成。

Answer: C

Question No : 17

A travel company re-architects its application from a two-tier to a three-tier architecture.
To see what impact the new architecture has on its non-functional requirements (NFR), the company intends to build a prototype based on the new architecture.
The company compares the NFR metrics associated with the new prototype against the metrics from their original two-tier solution.
Which option is an advantage of the original two-tier solution?
A. It has better availability because it has fewer single points of failure.
B. It has better manageability because each client has its own copy of the application.
C. It has better performance because each client must use its own set of domain objects.
D. It has better scalability because each client can access the database independently of other clients.

一家旅游公司将其应用从两层结构重新架构到三层架构。
为了了解新体系结构对非功能性需求(NFR)的影响，该公司打算基于新架构构建一个原型。
该公司将与新原型相关联的NFR指标与原始的两层解决方案相比较。
哪个选项是原来的两层解决方案的优势?

答:它有更好的可用性，因为它的单点故障较少。
它具有更好的可管理性，因为每个客户端都有自己的应用程序副本。
它具有更好的性能，因为每个客户端都必须使用它自己的域对象集。
它具有更好的可伸缩性，因为每个客户端都可以独立于其他客户端访问数据库。

Answer: A

Question No : 18

Which two statements describe the contact between an Enterprise JavaBeans (EJB) container and the EJBs that it hosts?
A. The container provides automatic logging of all exceptions and errors generated by EJB code.
B. The container provides a transparent scaling mechanism to handle spikes in demand.
C. An EJB can extend its services, such as security, to improve performance.
D. The container has a well defined lifecycle model for each EJB type.

哪两个语句描述了Enterprise javabean(EJB)容器和它所承载的EJB之间的联系?

容器提供了对EJB代码生成的所有异常和错误的自动记录。
容器提供了一个透明的扩展机制来处理需求的峰值。
EJB可以扩展它的服务，比如安全性，以提高性能。
容器为每个EJB类型定义了一个定义良好的生命周期模型。

Answer: B,D

Question No : 19

What are two consequences of using the Composite View pattern?
A. Improves performance
B. Avoids duplicate content
C. Forces a whole-part dependency
D. Allows tables to be reused in multiple locations
E. Restricts all sub views to have a consistent view technology

使用复合视图模式的两个结果是什么?
答:提高了性能
避免重复内容
强制一个整体局部的依赖性
允许在多个位置重用表
限制所有子视图具有一致的视图技术

Answer: B,D

Question No : 20
Which option describes the design relationship between session beans and entity beans?
A. Aggregation
B. Separation of concerns
C. Common reuse principle
D. Liskov substitution principle
E. Interface segregation principle

哪个选项描述会话bean和实体bean之间的设计关系?

聚合
关注点分离
常见重用原则
Liskov替换原则
接口隔离原则

Answer: B

Question No : 21

Which three web applications work best when they are designed to be server-push enabled?
A. A news feed used for providing users with frequently updated news content
B. A web chat that allows users to communicate using easily accessible web interfaces
C. A live sporting event application, used to deliver current results during matches
D. An auction system that provides users with live online bidding
E. A graphics rendering application that generates visuals in an orderly fashion

哪三个web应用程序在设计为服务器驱动时最有效?

用于为用户提供频繁更新的新闻内容的新闻提要
web聊天，允许用户使用容易访问的web界面进行通信。
一个实时的体育赛事应用程序，用于在比赛中交付当前的结果。
一种拍卖系统，为用户提供在线竞拍
一个图形渲染应用程序，它能以有序的方式生成图像。

Answer: B,C,D

Question No : 22

A manufacturing company has a large investment in a legacy Inventory Management System (IMS) developed with third-party technologies.
You have been asked to design a Java EE application that interacts with it.
You would like to ensure the following:
Minimal application code is required to parse the communication messages.
Communication is asynchronous and stateless.
Performance import of the existing system is minimal.
Which two technologies combined would meet these requirements?

A. XML
B. JSON
C. RMI
D. JAX-RS
E. JAX-WS

一家制造公司在一个由第三方技术开发的遗留库存管理系统(IMS)中投入了大量的资金。
您已经被要求设计一个与之交互的Java EE应用程序。
您希望确保以下内容:
需要最少的应用程序代码来解析通信消息。
通信是异步的和无状态的。
现有系统的性能导入是最小的。
哪两种技术结合起来会满足这些要求?

Answer: B,D

Question No : 23

Which is an objective of the Strategy pattern?
A. To provide a way to configure a class with one of many behaviors
B. To define an object that encapsulates how a set of objects interacts
C. To define the skeleton of an algorithm, deferring some steps to subclasses
D. To decouple an abstraction horn its implementation so that the two can vary independently
E. To define a family of algorithms, encapsulate each one, and make them interchangeable
F. To allow subclasses to redefine certain steps of an algorithm without changing the algorithm's structure

以下哪种是策略模式的目标
为了提供一种配置类的方法，可以使用多种行为之一
定义一个对象，它封装了一组对象的交互方式
为了定义算法的框架，将一些步骤推迟到子类
为了使抽象的实现分离，使两者可以独立地改变
定义一个算法的家族，封装每一个，并使它们相互转换
允许子类重新定义算法的某些步骤而不改变算法的结构

Answer: A

Question No : 24

You need to restrict access to the administration screens in your website.
Which two techniques test a user's permissions before granting access to a particular screen?
A. Enterprise JavaBeans (EJB) entity
B. Servlet filter
C. Custom tag library
D. Deployment descriptor
E. Custom JavaScript in JSP

您需要限制访问您的网站上的管理界面。

Answer: B,D

Question No : 25
A company is extending is successful social networking site to support the following channels:
instant messaging (IM), email messaging and text messaging/SMS.
At present, the site has scaled 400% in one year using a standard MVC Web framework the application experiences large surges or spikes in demand and also periods of inactivity.
Notification delivery to the three channels does not need to be guaranteed.
Which solutions extends the current architecture and best meets the company’s requirements?
A. Send the notification inline, that is, within the normal HTTP request-response cycle.
B. Place messaging on a Java messaging Service (JMS) queue and use message-driven beans (MDBs) to create and send notifications.
C. Insert the messages into a database and use plain old Java Objects (POJOs) to read the messaging using JDBC and send notifications.
D. Insert the messages into a database and use entity beans to read the messages using JDBC and send notifications.

一家公司正在扩展成功的社交网站，以支持以下渠道:
即时消息(IM)、电子邮件消息和文本消息/sms。
目前，该站点使用标准的MVC Web框架在一年内达到了400%的规模，应用程序体验了大量的激增或峰值的需求，以及不活跃的时期。
对三个通道的通知传递不需要保证。
哪些解决方案扩展了当前的体系结构，并满足了公司的要求?

在正常的HTTP请求-响应周期内发送通知。
在Java消息传递服务(JMS)队列上放置消息传递，并使用消息驱动bean(mdb)来创建和发送通知。
将消息插入到数据库中，并使用普通的旧Java对象(pojo)来读取消息，使用JDBC和发送通知。
将消息插入到数据库中，并使用实体bean来读取消息，使用JDBC和发送通知。

Answer: B

Question No : 26

A company must honor a service-level agreement (SLA) for its application, which states all database requests must execute within three seconds.
Users complain that some requests take longer than five seconds to complete. You have been contracted to fix the problem.
Which course of action do you recommend?
A. Modify the program to implement multi threading and an event-driven design.
B. Add servers to distribute the load.
C. Upgrade the application server and the operating system.
D. Define a plan for isolating the bottleneck, and define indicators that will measure performance under a test load.

公司必须为其应用程序履行服务水平协议(SLA)，该协议规定所有数据库请求必须在三秒内执行。
用户抱怨有些请求需要花费超过5秒的时间才能完成。
你已经签约来解决这个问题了。
你推荐哪一种行动?

修改程序以实现多线程和事件驱动的设计。
添加服务器以分发负载。
升级应用服务器和操作系统。
定义一个隔离瓶颈的计划，并定义在测试负载下测量性能的指标。

Answer: D

Question No : 27

Your CMC wants to move several web based search applications to an AJAX model, hoping to improve user engagement with a browser experience that feels smaller and more responsive.
Which identifies a drawback to consider when adopting an AJAX model to improve user experience?
A. Maintaining current performance could require more hardware.
B. Maintaining accessibility across clients may require more development.
C. Maintaining security within the page could be more difficult.
D. Maintaining page navigability for users would have to be re-evaluated.
E. Maintaining a scalable system could require redesigning applications.

您的CMC想要将几个基于web的搜索应用程序转移到一个AJAX模型中，希望通过浏览器体验来提高用户的参与度，这种体验感觉更小、响应更迅速。
当采用AJAX模型来改进用户体验时，这是一个值得考虑的缺点吗?

维持当前的性能可能需要更多的硬件。
维护跨客户端的可访问性可能需要更多的开发。
在页面中维护安全性可能会更加困难。
为用户维护页面导航功能将不得不重新评估。
维护一个可伸缩的系统可能需要重新设计应用程序。

Answer: C

Question No : 28

A company has been soiling a desktop based billing application that has Character User Interface (CUI) application developed by using Java.
The company would like to release the next version of this application with the following features:
a GUI with a pluggable lookand-feel capability and the flexibility to support multiple database vendors.
Which two technologies would you use in the new version?
A. Swing
B. JDBC
C. JPA
D. CMP
E. AWT

一家公司一直在用Java开发一个基于桌面的计费应用程序，该应用程序具有用户界面(CUI)应用程序。
该公司希望发布该应用的下一个版本，并提供以下功能:
具有可插入的外观和感觉能力的GUI，以及支持多个数据库供应商的灵活性。

Answer: A,B

Reference: http://en.wikipedia.org/wiki/Java_Platform,_Standard_Edition (see javax.swing and java.sql)

Question No : 29

An online library wants to introduce a feature where an email notification is generated whenever a book becomes available for circulation.
This notification must be sent to only those members who have expressed interest in that book.
Which design pattern would you use to implement this requirement?
A. Observer
B. Payload Extractor
C. Asynchronous Resource Integrator
D. Web Service Broker
E. Service Starter

一个在线图书馆想要引入一个功能，当一本书可以流通时，就会产生一个电子邮件通知。
这个通知必须只发送给那些对那本书感兴趣的人。
您将使用哪种设计模式来实现此需求?

Answer: A

Question No : 30

You are designing a new subsystem to store and scratch for user commands in a fashion company’s website.
On class, CommentManager, is responsible for accessing comment data and providing read-only access to other objects in the subsystem.
Which two implementation details are necessary for the Cementmanager class?
A. The storage mechanism implemented in CommentManager must be private to CommentManager.
B. All the accessor and mutator methods in CommentManager must have the static modifier in their declarations.
C. The comments must be assessable directly only within CommentManager.
D. CommentManager should be a singleton object.

您正在设计一个新的子系统，用于在一家时尚公司的网站上存储和刮用户命令。
在类上，CommentManager 负责访问评论数据，以及为子系统中的其他对象提供只读访问。
对于Cementmanager类，哪两个实现细节是必需的?

在注释管理器中实现的存储机制必须是注释管理器私有的。
在注释管理器中，所有访问器和mutator方法都必须在声明中使用静态修饰符。
注释必须直接在注释管理器内进行评估。
注释管理器应该是单例对象。

Answer: A,C

Question No : 31

You are the architect for a patient management system with an HTMLUI. Currently, it is used by ward nurses who access the system using dockable tablet computers.
The application uses the HttpSession object to store information.
In phase two of the implementation, nurses will also have access through smart phones.
These phones will use a native client rather than HTML, and will access the same business logic using a Web service.
Which two are optimal methods to manage conversational state in the new version of the system?
A. The HTML UI and native clients both use HttpSession objects.
B. The HTML UI and native clients both use stateful session beans.
C. The HTML UI and native clients both use stateless session beans.
D. The HTML UI uses an HttpSession object, native clients create a session management object.
E. The HTML UI and native clients both use singleton beans.

您是一个拥有HTMLUI的患者管理系统的架构师。
目前，使用可使用平板电脑的病房护士使用该系统。
该应用程序使用HttpSession对象来存储信息。
在实施的第二阶段，护士也可以通过智能手机访问。
这些电话将使用本地客户端而不是HTML，并将使用Web服务访问相同的业务逻辑。
哪两个是在新版本系统中管理会话状态的最佳方法?

HTML UI和本地客户端都使用HttpSession对象。
HTML UI和本地客户端都使用有状态会话bean。
HTML UI和本地客户端都使用无状态会话bean。
HTML UI使用HttpSession对象，本地客户端创建会话管理对象。
HTML UI和本地客户端都使用单例bean。

Answer: B,D

Question No : 32

Which two statements are true about RESTful web services?
A. They can be both stateful and stateless.
B. They support the use of AJAX in web applications.
C. They are often similar than their Simple Object Access protocol (SOAP) equivalents.
D. They are independent of the transport protocol.
E. They support Remote Procedure Call (RPC) and message-Oriented Middleware (MOM) integration styles.

关于RESTful web服务，哪两种说法是正确的?

它们可以是有状态的，也可以是无状态的。
它们支持在web应用程序中使用AJAX。
它们通常与简单的对象访问协议(SOAP)对等物相似。
它们是独立于运输协议的。
它们支持远程过程调用(RPC)和面向消息的中间件(MOM)集成风格。

Answer: B,C

Question No : 33

Which two statements apply to unsigned applets?
A. They can access the client file system.
B. They can connect to third-party servers.
C. They can connect to the originating host.
D. They can invoke public methods of applets on a page.
E. They can load native libraries.

哪两个语句适用于无符号的applet?

他们可以访问客户端文件系统
他们可以连接到第三方服务器
它们可以连接到原始主机
它们可以调用页面上的applet的公共方法
他们可以加载本地的库

Answer: C,D

Question No : 34

You are the architect of a web application that uses javaServer Faces (JSF) as a presentation tier for business processes coded as stateless session beans.
When you add new code to the stateless session beans to address new accounting requirements, without changing the interface, you discover that the new business processes are being ignored by some of the JSF components.
What might be the cause of this problem?
A. The presentation tier is relying on validation logic in the business tier.
B. The browser is caching out-of-date versions of the JSF components.
C. The business processes are not rigorously encapsulated in the session beans.
D. The new session beans have been deployed incorrectly, and proper deployment will resolve the problem.

您是一个web应用程序的架构师，该应用程序使用javaServer Faces(JSF)作为一种表示层，用于作为无状态会话bean的业务流程的表示层。
当您在无状态会话bean中添加新代码以满足新的会计需求时，不改变接口，您会发现新的业务流程被一些JSF组件忽略了。
这个问题的起因是什么?

表示层依赖于业务层中的验证逻辑。
浏览器正在缓存JSF组件的过时版本。
业务流程没有严格封装在会话bean中。
新的会话bean被错误地部署，正确的部署将解决问题。

Answer: C

Question No : 35

Your company uses a payroll application that was developed using Java technologies.
The company has acquired another company and plans to integrate its payroll process in existing application.
You have been asked to implement this integration. You observe that the business logic adopted to calculate the payroll is different in both companies.

Which design pattern would be most appropriate to use in this integration?
A. Strategy
B. Payload Extractor
C. Fly Weight
D. Composite
E. Service Locator

您的公司使用的是使用Java技术开发的工资单应用程序。
该公司已经收购了另一家公司，并计划在现有的应用程序中整合其工资流程。
您已经被要求实现这个集成。
您注意到，在这两家公司中采用的计算薪水的业务逻辑是不同的。

Answer: A

Question No : 36

Which two are significant advantages of developing web applications with JavaServer Faces (JSF)?
A. JSF pages can be previewed outside the web container.
B. Backing beans can be unit tested outside the web container.
C. Client-side validation mechanisms are automatically generated.
D. JSF pages can be integrated with AJAX.

使用JavaServer Faces(JSF)开发web应用程序的两个优点是什么?

JSF页面可以在web容器之外进行预览。
支持bean可以在web容器外进行单元测试。
客户端验证机制自动生成。
JSF页面可以与AJAX集成。

Answer: C,D

Explanation:
D: JSF is often used together with Ajax, a Rich Internet application technology.
Because JSF supports multiple output formats, Ajax-enabled components can easily beadded to enrich JSF-based user interfaces.
The JSF 2.0 specification provides built in support for Ajax by standardizing the Ajax request lifecycle, and providing simple development interfaces to Ajax events,
allowing any event triggered by the client to go through proper validation, conversion, and finally method invocation, before returning the result to the browser via an XML DOM update.
Note:
* JavaServer Faces technology is a user interface framework for building web applications.
* The following features support the GUI components:
/ Input validation
/ Event handling
/ Data conversion between model objects and components
/ Managed model object creation
/ Page navigation configuration
All this functionality is available using standard Java APIs and XML-based configuration files

JSF经常与Ajax一起使用，这是一种丰富的Internet应用程序技术
由于JSF支持多种输出格式，因此可以很容易地添加支持ajax的组件，以丰富基于JSF的用户界面。
JSF 2.0规范通过标准化Ajax请求生命周期来支持Ajax，并为Ajax事件提供简单的开发接口，
允许客户机触发的任何事件经过适当的验证、转换和最后的方法调用，然后通过XML DOM更新将结果返回给浏览器。

JavaServer Faces技术是一个用于构建web应用程序的用户界面框架。
以下特性支持GUI组件:
/输入验证
/事件处理
模型对象和组件之间的数据转换
/受管理的模型对象创建
/页面导航配置
所有这些功能都可以使用标准的Java api和基于xml的配置文件

Question No : 37

Which two statements are true about the timer service of a business component container?
A. Timed notifications for all types of session beans can be scheduled by using this service.
B. When the server is shut down, the timer is persisted automatically and becomes active again when the server is restarted.
C. Each instance of message driven beans has unique timers.
D. When stateful session bean instance is removed, the container detaches the timers associated with the instance and allocates them to the new instance.
E. When a transaction is rolled hark, the timer creation within the transaction is also rolled back.

对于业务组件容器的定时器服务，哪两种说法是正确的?

对所有类型的会话bean的定时通知可以通过使用该服务进行调度。
当服务器被关闭时，定时器会自动被持久化，当服务器重新启动时，它会重新活跃起来。
每个消息驱动bean的实例都有唯一的计时器。
当有状态会话bean实例被删除时，容器会将与该实例相关联的计时器分离，并将它们分配给新实例。
当一个事务被滚动时，事务中的定时器创建也会被回滚。

Answer: B,E

Question No : 38

Which three actions restrict the ability of a web application to scale in response to load as additional computing resources are made available to it?
A. Implementing the Singleton pattern in the web tier
B. Implementing core business logic in the web tier
C. Implementing core business logic using stateless session beans
D. Storing users' session state in a database
E. Maintaining users' session state by using stateful session beans

当额外的计算资源可用时，哪三种操作限制了web应用程序对负载的响应能力?

在web层中实现Singleton模式
在web层中实现核心业务逻辑
使用无状态会话bean实现核心业务逻辑
将用户的会话状态存储在数据库中
通过使用有状态会话bean来维护用户的会话状态

Answer: A,B,E

Question No : 39

Which type of application would benefit from using the Singleton pattern?
A. An application that interacts with external systems in serial fashion.
B. An application that interacts with external systems in parallel fashion.
C. A clustered application that can support 200 concurrent users.
D. An application that requires remote monitoring capabilities

哪种类型的应用程序会受益于使用单例模式?

一种以串行方式与外部系统交互的应用程序。
一种以并行方式与外部系统交互的应用程序。
一个可以支持200个并发用户的集群应用程序。
一个需要远程监视功能的应用程序

Answer: A

Question No : 40
You are conducting a security audit for a web application that uses URL rewriting.
The application does not allow for user-generated content and is accessible only via secured VPN.
Which two security threats would you prioritize in your audit?
A. SQL injection
B. Cross-site scripting
C. Parameter-site manipulating
D. Session hijacking
E. Denial-of-service attacks

您正在对使用URL重写的web应用程序进行安全审计。
该应用程序不允许用户生成内容，只能通过安全的VPN访问。
在你的审计中，你会优先考虑哪两种安全威胁?

SQL注入
跨站点脚本编制
Parameter-site操纵
会话劫持
拒绝服务攻击

Answer: C,D

Question No : 41

A company wants to design an internal website for the purpose of managing its numerous social events.
The site will not have heavy traffic, but will require state to be persisted in a database.
You have been tasked to complete this action item in your spare time.
Which two Java EE-based approaches are best suited for quick development?

A. Use JPA in the web tier only.
B. Use message-driven beans to manage the posting of events.
C. Use your domain model components as JavaServer Faces (JSF) managed beans.
D. Use an Enterprise javaBeans (EJB) container to service-inject the domain model and support a JPA deployment.

一家公司想要设计一个内部网站，以管理其众多的社交活动。
该站点不会有大量的流量，但是将需要状态持久化到数据库中。
你的任务是在你的业余时间完成这个动作项目。
哪两种基于Java的方法最适合快速开发?

仅在web层中使用JPA。
使用消息驱动bean来管理事件的发布。
使用您的域模型组件作为JavaServer Faces(JSF)管理bean。
使用Enterprise javabean(EJB)容器来服务注入域模型，并支持JPA部署。

Answer: A,C

Question No : 42

Which three statements are true about inheritance?
A. Inheritance helps to reuse existing code implementations.
B. It should be possible to substitute the derived class for its base class.
C. Inheritance allows you to modify the behavior of objects.
D. Inheritance promotes encapsulation better than interfaces.
E. The derived class must override all methods of the base class.

关于继承，哪三种说法是正确的?

继承有助于重用现有的代码实现。
应该可以用它的基类来代替派生类。
继承允许您修改对象的行为。
继承比接口更能促进封装。
派生类必须覆盖基类的所有方法。

Answer: A,B,C

Question No : 43

Blue Berry Corporation, one of the biggest fruit traders in Canada, has the biggest competitor, Red Cherry Corporation.
Blue Berry uses a web application that is developed by using java technologies, whereas Red Cherry’s web application uses non-Java technologies.
Blue Berry plans to share business sensitive, transactional data between the two systems by integrating them in a loosely coupled manner.
Which technology should be used to this?
A. JMS
B. JCA
C. XML over HTTPS
D. RMI over IIOP
E. JBI

蓝莓公司是加拿大最大的水果贸易商之一，其最大的竞争对手是红樱桃公司。
Blue Berry使用java技术开发的web应用程序，而红樱桃的web应用程序使用的是非java技术。
Blue Berry计划通过一种松散耦合的方式将两个系统之间的业务敏感、事务性的数据共享。
应该使用哪种技术呢?

Answer: B

Question No : 44

Which two actions limit the consequences of a network based attack?
A. Implementing the principle of least privilege
B. Installing a firewall at the outer boundary of your systems
C. Placing Internet-accessible servers in a demilitarized zone
D. Deploying a single sign-on system to provide system-wide authorization
E. Allowing application servers privileged access to all databases

哪两种行为限制了网络攻击的后果?

实施最少特权原则
在系统的外部边界安装防火墙
将可上网的服务器放置在非军事区
部署一个单点登录系统来提供系统范围的授权
允许应用程序服务器访问所有数据库

Answer: A,E

Question No : 45

You are implementing an online music that will store and play a user’s collection of songs.
You want users to rate their songs and view the top songs from friends.
All queries must complete in four seconds or less.
Which approach would meet the response time requirement with minimal overhead?
A. Java class that uses JDBC with embedded SQL
B. Java class that uses an optimized stored procedure
C. JPA entity class with a lazy fetching strategy
D. JPA entity class with an eager fetching strategy

您正在实现一种在线音乐，它将存储并播放用户的歌曲集合。
你想让用户对他们的歌曲进行评分，并从朋友那里观看最热门的歌曲。
所有查询必须在4秒或更短的时间内完成。
哪一种方法能够以最小的开销满足响应时间需求?

使用带有嵌入式SQL的JDBC的Java类
使用优化的存储过程的Java类
带有延迟抓取策略的JPA实体类
具有迫切抓取策略的JPA实体类

Answer: B

Question No : 46
You are the architect of a JEE-based product that customers can configure to meet their own security requirements.
You want to enforce basic without sacrificing customers ability to customize the product.
Which is the best method to support both requirements?
A. Define base roles and users declaratively
B. Define base roles and users programmatically
C. Build a custom security service to handle authorization
D. Customize the JRE sandbox model by using local variables

您是一个基于je基产品的架构师，客户可以配置该产品来满足他们自己的安全需求。
您希望在不牺牲客户定制产品的能力的基础上执行基本的工作。
哪一种方法是支持这两种需求的最佳方法?

以声明的方式定义基本角色和用户
以编程的方式定义基本角色和用户
构建一个自定义的安全服务来处理授权
通过使用本地变量定制JRE沙箱模型

Answer: C

Question No : 47

You are the operations architect for a large online retailer.
During peak times, your set of monitored applications exhibits non-reproducible errors.
The data center is growing at 50% per annum, while your team headcount remains constant.
Which method would you use to implement an affective monitoring strategy?
A. Use the Visitor pattern to collect per-JVM statistics and store them centrally.
B. Use the Strategy pattern to encapsulate collection logic for each JVM.
C. Use the Thread Tracker to monitor the JVMs directly.
D. Use the Observer pattern to monitor each JVM directly.

您是大型在线零售商的运营架构师。
在高峰时期，您所监视的应用程序集展示了不可复制的错误。
数据中心以每年50%的速度增长，而你的团队成员仍然保持不变。
你会用哪种方法来实施一种有效的监控策略?

使用访问者模式来收集每个jvm的统计信息并将它们集中存储。
使用策略模式来封装每个JVM的集合逻辑。
使用线程跟踪器直接监视jvm。
使用观察者模式来直接监视每个JVM。

Answer: D

Question No : 48
You are consulting with a team that has maintained several legacy database for years.
They have reviewed the JPA spec and are wondering if the technology would offer benefits over this current SQL base.
Which statement identifies a risk of adopting JPA?
A. JPA only works with well-known data models.
B. JPA may be able to model every table as a class.
C. JPA could render code that requires extensive SQL tuning to perform well.
D. JPA’s query language relies on a container to manage the persistence layer.
E. JPA doesn’t provides ACID semantics.

您正在与一个多年来维护好几个遗留数据库的团队进行协商。
他们已经审查了JPA规范，并且想知道该技术是否能在当前的SQL基础上提供一些好处。
哪个语句标识采用JPA的风险?

JPA只适用于著名的数据模型。
JPA可以将每个表建模为一个类。
JPA可以呈现需要大量SQL调优的代码才能执行得很好。
JPA的查询语言依赖于一个容器来管理持久层。
JPA不提供ACID语义。

Answer: A

Question No : 49
Which two functions are essential parts of a service oriented architecture (SOA) infrastructure?
A. The service provider, which executes business logic in a stateless fashion
B. The service consumer, which accesses services from the service repository
C. The service repository, which stores software component metadata
D. The service broker, which delivers well-defined service-level agreements
E. The service look-up facility, which provides a central resource for naming and access

哪两个功能是面向服务体系结构(SOA)基础结构的关键部分?
服务提供者，它以无状态的方式执行业务逻辑
服务消费者，它从服务存储库访问服务。
存储软件组件元数据的服务存储库
服务代理，它提供了定义良好的服务水平协议
服务查找工具，它为命名和访问提供了一个中心资源。

Answer: A,C

Question No : 50
A business application that runs in an Enterprise JavaBeans (EJB) container must communicate with a transactional third-party service.
The communication technology must allow changing service providers without changing the application’s business model.
Which technology would meet these requirements?
A. Java Message Service
B. Remote Method Invocation
C. Simple Object Access Protocol
D. Java Connector Architecture
E. Java Business Integration

在企业javabean(EJB)容器中运行的业务应用程序必须与事务第三方服务进行通信。
通信技术必须允许更改服务提供者而不改变应用程序的业务模型。
哪种技术能满足这些要求?
Answer: A

Question No : 51
Which three principles are best practices when implementing a logging strategy for an enterprise application?
A. Never print log messages to the console window.
B. Use the appropriate logger level for logging information.
C. Log messages for every method entry and exit.
D. Include programmer-specific data in the log messages.
E. Include the thread name and Java class name in log messages.

在为企业应用程序实现日志策略时，哪三个原则是最佳实践?

永远不要将日志消息打印到控制台窗口。
使用适当的日志记录器级别来记录信息。
为每个方法条目和退出记录日志消息。
在日志消息中包含特定于程序员的数据。
在日志消息中包括线程名和Java类名。

Answer: B,C,D

Question No : 52

Which two are primary concerns for a service-oriented architecture (SOA)?
A. Low cohesion
B. Loose coupling
C. Session handling
D. Well defined contracts

哪两个是面向服务的体系结构(SOA)的主要关注点?
低内聚
松耦合
会话处理
良好约定

Answer: B,D

Question No : 53

Your company is considering migrating a persistence module, originally implemented as CMP entity beans, to now use JPA.
Which two statements are true?
A. Each CMP entity bean can be mapped to a single JPA entity class.
B. The client code that accesses the CMP entity beans does not have to change.
C. IPA cannot capture all the kinds of relationships supported by CMP entity beans.
D. The resulting IPA persistence module can be used on both the client and the server.
E. The JNDI name of a JPA entity class can be customized to match that of the corresponding CMP entity bean.
F. Remote clients of the CMP entity beans must start using web services to access the JPA entity classes on the server.

您的公司正在考虑迁移一个持久性模块，最初是作为CMP实体bean来实现的，现在使用JPA。
哪两个陈述是正确的?

每个CMP实体bean都可以映射到单个JPA实体类。
访问CMP实体bean的客户端代码不需要更改。
IPA不能捕获CMP实体bean所支持的所有类型的关系。
最终的IPA持久性模块可以在客户机和服务器上使用。
一个JPA实体类的JNDI名称可以定制，以匹配相应的CMP实体bean。
CMP实体bean的远程客户端必须开始使用web服务来访问服务器上的JPA实体类。

Answer: A,D

Question No : 54

Your application produces messages by client applications. The number of clients interested in the messages varies continuously at run time.
Any client can process any message, but a message must be processed exactly once.
How should the messages be delivered to the clients?
A. Using a Java Message Service (JMS) topic
B. Using a Java Message Service (JMS) queue
C. Using XML over HTTP
D. Using a Simple Object Access Protocol (SOAP) web service

您的应用程序通过客户机应用程序生成消息。
对消息感兴趣的客户机的数量在运行时不断变化。
任何客户端都可以处理任何消息，但是必须对消息进行精确的处理。
如何将消息传递给客户端?

使用Java消息服务(JMS)主题
使用Java消息服务(JMS)队列
在HTTP上使用XML
使用一个简单的对象访问协议(SOAP)web服务

Answer: B

Question No : 55

Which two security threats are negated by encrypting network transactions with Transport Layer Security (TLS)?
A. SQL injection
B. Session hijacking
C. Man in the middle
D. Cross-site scripting
E. Denial of service

通过对传输层安全性(TLS)的网络事务加密，这两种安全威胁是什么?
SQL注入
会话劫持
中间的人
跨站点脚本编制
拒绝服务

Answer: B,C

Question No : 56
Which two kinds of applications benefit from the adoption of service oriented architecture (SOA) inspired patterns and practices?
A. An application that retains legacy systems while evolving to accommodate future business demands
B. An application with tightly coupled services that enable messages to flow easily
C. An application that utilizes fine-grained interfaces to provide communication to the object of a service
D. An application in which the communication between services and the business process are platform independent.

哪两种应用程序受益于采用面向服务的体系结构(SOA)的模式和实践?

一个应用程序，它保留了遗留系统，同时还在不断改进以适应未来的业务需求。
具有紧密耦合服务的应用程序，使消息能够轻松地流动。
一个应用程序，它利用细粒度的接口来为服务对象提供通信。
一种应用程序，服务和业务流程之间的通信是独立于平台的。

Answer: A,D

Question No : 57
Your company provides a marketplace for industrial chemicals. You are required to offer accurate pricing and quantities to all marketplace users.
Marketplace users are globally distributed.
What is the most appropriate technology to use to satisfy this requirement?
A. Server-side distribution using JAX-WS
B. Client-side polling using JAX-RPC
C. Web services using REST
D. An enterprise messaging system

贵公司为工业化学品提供市场。
你需要向所有的市场用户提供准确的价格和数量。
市场用户是全球分布的。
满足这一要求的最合适的技术是什么?

使用jax-ws的服务器端分发
使用了使用的方法的客户端轮询
使用REST的Web服务
企业消息传递系统

Answer: C

Question No : 58

Which two statements are true about delegation as an Object-Oriented Design technique?
A. It is applied to a system only at compile time.
B. It is an essential element of the Singleton pattern.
C. It allows you to replace Inheritance with composition.
D. In Java technology, it is always implemented through the use of generics.
E. It always requires that at least two objects are involved in handling a request.

作为面向对象设计技术的委托，哪两个陈述是正确的?

它仅在编译时应用于系统。
这是Singleton模式的一个基本要素。
它允许您用组合替换继承。
在Java技术中，它总是通过使用泛型来实现的。
它总是要求在处理请求时至少要有两个对象。

Answer: C,E

Question No : 59

A company provides call center support for corporations world-wide. Each agent in the call center can be assigned to multiple call center customers.
All the company's customers use Windows based user interfaces and it has Just signed a new customer that uses a Java EE back end and wants a rich interface.
The company is developing a user interface for the new customer with the following requirements:
Customer service representatives (CSRs) must be able to work with minimal training on the application.
CSRs must be able to switch between call center systems quickly.
Screens must have a windows look and feel.
2000 agents spread across four locations must be able to use the system.
Which recommendation would you make to this company about the user interface (UI)?
A. Write the UI using JSP and JSTL.
B. Write the UI using JSPs with embedded script lets.
C. Write the UI using AJAX, Accessing servlets directly.
D. Write the UI using Java Swing and describe using JNLP.

一家公司为世界各地的企业提供呼叫中心支持。
呼叫中心中的每个代理都可以被分配给多个呼叫中心客户。
该公司的所有客户都使用基于Windows的用户界面，并刚刚签署了一个新客户，该客户使用Java EE后端，并希望拥有丰富的界面。
该公司正在为新客户开发一个用户界面，并有以下要求:
客户服务代表(CSRs)必须能够对应用程序进行最少的培训。
CSRs必须能够快速地在呼叫中心系统之间切换。
屏幕必须有窗的外观和感觉。
在四个位置分布的2000个代理必须能够使用这个系统。
对于用户界面(UI)，您将向该公司提出哪些建议?

使用JSP和JSTL编写UI。
用带有嵌入脚本的jsp来编写UI。
使用AJAX编写UI，直接访问servlet。
使用Java Swing编写UI，并描述使用JNLP。

Answer: D

Question No : 60

Which two use cases are best suited to the RPC style of messaging using Simple Object Access Protocol (SOAP)?
A. Processing large sized communication messages
B. Implementing line grained services
C. Validating custom data types
D. Implementing asynchronous web services
E. Executing long running multi-part processes

这两个用例最适合使用简单对象的RPC样式的消息传递访问协议(SOAP)?

处理大尺寸的通信信息
实现行粒度服务
验证自定义数据类型
实现异步web服务
执行长时间运行的多部分过程

Answer: B,C

Question No : 61

Your company has decided to expose a set of business operations through an API so that clients can access them remotely.
These operations, which are modeled as methods on a stateless session bean component, act as building blocks for complex state-changing activities that need to possess atomicity, consistency, isolation and durability (ACID) semantics.
Select the best technology to implement the API.
A. Remote Method Invocation (RMI)
B. Java Message Service (JMS)
C. XML over HTTP
D. Java Connector Architecture (JCA)

您的公司已经决定通过API公开一组业务操作，以便客户端可以远程访问它们。
这些操作被建模为无状态会话bean组件的方法，作为复杂状态变化活动的构建块，这些活动需要具有原子性、一致性、隔离性和持久性(ACID)语义。
选择最好的技术来实现API。

远程方法调用(RMI)
Java消息服务(JMS)
XML / HTTP
Java连接器体系结构(JCA)

Answer: A

Question No : 62

Which two measures are most effective in protecting websites from cross site scripting (XSS) attacks?
A. Escape “<” and “>” parameters that displayed or evaluated by the JavaScript interpreter.
B. URL-encode “<” and “>”parameters so they will never be evaluated by the JavaScript Interpreter.
C. Ensure that the session cookie is sent only on UTTPS connections.
D. Treat all user-supplied input as unsafe, and white list known good characters
E. Execute all user-supplied scripts in a server-side sandbox.

哪两项措施最有效地保护网站不受跨站点脚本攻击(XSS)攻击?

转义“小于”和“参数”的参数，这些参数由JavaScript解释器显示或评估。
url编码“小于”和“参数”，因此它们永远不会被JavaScript解释器所评估。
确保会话cookie只发送到乌普的连接上。
将所有用户输入的输入都视为不安全的，而白名单则是已知的好字符
在服务器端沙箱中执行所有用户提供的脚本。

Answer: C,E

Question No : 63

You are the architect at ACME, a large a large global retailer of festival and holiday accessories.
ACME wants to launch a new shopping portal for the holiday shopping session, allowing two months from project inception to going live.
The portal must contain in-house and third-party stock to attack customers.
Fast response times are also critical so users remain engaged and sticky to the portal.
What would you recommend to the ACME project team to deliver this project?
A. Access all third party content using JSONP to dynamically load it from the browser.
B. Access as much content with bulk-loading as possible; use JSONP to access the remainder.
C. Access all content regardless of source using the HTML 5 XML parsing capabilities of the browser
D. Access all third party content using JSON to dynamically load it from the browser.

您是ACME的架构师，该公司是一个大型的大型全球节日和节日配饰零售商。
ACME想要为假期购物会话启动一个新的购物门户，允许从项目开始到运行两个月。
门户必须包含内部和第三方的股票来攻击客户。
快速响应时间也是至关重要的，因此用户仍然保持对门户的参与和粘性。
您将向ACME项目团队推荐什么来交付这个项目?

使用JSONP访问所有第三方内容，并从浏览器中动态地加载它。
尽可能多地使用批量加载的内容; 使用JSONP访问剩余部分。
使用浏览器的HTML 5 XML解析功能访问所有内容
访问所有第三方内容，使用JSON从浏览器动态地加载它。

Answer: A

Question No : 64

You are the lead technical designer for a new B2C retail application. A key goal is to minimize design and build complexity in order to maximize speed to market.
Which three features of JPA make it the most appropriate technology to use in building the persistence layer of the application?
A. JPA ensures thread safe semantics
B. JPA ensures optimal database access logic
C. JPA does not require an FJB container
D. JPA provides vendor-neutral database access
E. JPA provides ACID semantics
F. JPA provides transparent scalability

您是新的B2C零售应用程序的主要技术设计人员。
一个关键的目标是最小化设计和构建复杂性，以最大化市场的速度。
JPA的三个特性使它成为构建应用程序持久层的最合适的技术?

JPA确保线程安全语义
JPA确保最优的数据库访问逻辑
JPA不需要FJB容器
JPA提供了与供应商无关的数据库访问
JPA提供了ACID语义
JPA提供了透明的可伸缩性

Answer: C,D,E

Question No : 65

You are the architect of an application that reads from and writes to multiple systems.
The application must participate in an existing transaction to update a database using JDBC, and also invoke a transactional method on a remote system as part of the same transaction.
Which two technologies would you suggest, to access remote system, for this application?
A. Java Connector Architecture (JCA)
B. java Message Service (JMS)
C. Remote Method Invocation (RMI)
D. Simple Object Access Protocol (SOAP)

您是一个应用程序的架构师，该应用程序从多个系统中读取和写入。
应用程序必须参与到现有事务中，以使用JDBC更新数据库，并在同一事务中调用远程系统上的事务方法。
对于这个应用程序，您建议使用哪两种技术来访问远程系统?

Java连接器体系结构(JCA)
java消息服务(JMS)
远程方法调用(RMI)
简单对象访问协议(SOAP)

Answer: A,C

Question No : 66

You are contracted to improve the performance of an application.
While analyzing the application, you observe the following issues:
Tight coupling between client and business objects
Too many remote method Invocations between client and server
Which design pattern is best suited to improving performance?
A. Web Service Broker
B. Session Façade
C. Value List Handler
D. Data Access Object
E. Service Activator

您是为了提高应用程序的性能而收缩的。
在分析应用程序时，您可以观察以下问题:
客户端和业务对象之间的紧密耦合
客户机和服务器之间的远程方法调用太多
哪种设计模式最适合提高性能?

Web服务代理
会话门面
值列表处理器
数据访问对象
服务激活

Answer: B
Reference: http://www.oracle.com/technetwork/java/sessionfacade-141285.html (see the problem and then the solution)

Question No : 67
Which two types of applications benefit from using JavaServer Faces (JSF)?
A. An application with a customizable UI skin
B. An application that implements access control on each action based on user role.
C. An application in which type conversion of the values of UI components is implemented only in Java classes.
D. An application that sets specific database validation listeners on a UI component

哪两种类型的应用程序可以从使用JavaServer Faces(JSF)中获益?

一个具有可定制的UI皮肤的应用程序
基于用户角色实现每个操作的访问控制的应用程序。
一个在Java类中实现UI组件值类型转换的应用程序。
在UI组件上设置特定的数据库验证侦听器的应用程序

Answer: C,D

Question No : 68

Which two statements are true about transport-layer security?
A. It applies to both a message body and its attachments.
B. It is loosely coupled with the transport-layer protocol.
C. It is an end-to-end security mechanism.
D. It prevents the captured data from being replayed at a later time.

对于传输层安全性，哪两种说法是正确的?

它既适用于消息体，也适用于它的附件。
它与传输层协议松散耦合。
它是一种端到端的安全机制。
它防止被捕获的数据在以后的时间被重新播放。

Answer: A,D

Question No : 69

Your company has been using the ACME database vendor for many years. Recently, it started considering a migration to the XYZ database vendor, who uses different SQL dialed.
The SQL engines in ACME and XYZ have significant differences in performance when executing the same SQL queries?
Which is the best persistence technology for database migration?
A. JPA
B. JDBC
C. CMP entity bean
D. JDBC row set XML serialization

多年来，您的公司一直在使用ACME数据库供应商。
最近，它开始考虑向XYZ数据库供应商迁移，后者使用的是不同的SQL。
在执行相同的SQL查询时，ACME和XYZ中的SQL引擎在性能方面有显著差异。
数据库迁移的最佳持久性技术是什么?

Answer: A

Question No : 70

Upper management has announced a change in a company's primary hardware supplier for the next year, the timing of this change coincides with key purchases that line of business department has to make in support of its Java EE application upgrade/redesign project.
You are asked to help outline a strategy to preserve the project timeline and keep hardware training costs contained.
Which recommendation will you make?
A. Add new hardware to create a heterogeneous environment.
B. Request another year of sales and support with the existing vendor.
C. Request more time to consider the total cost of change to your project and to modify your budget.
D. Use new hardware on the web tier and redeploy existing hardware to the other tiers.

高层管理人员已经宣布，明年公司的主要硬件供应商将发生变化，这一变化的时机恰好与商业部门的关键采购计划相一致，该部门必须为其Java EE应用升级/重新设计项目提供支持。
你被要求帮助制定一个战略，以保持项目时间表，并保持硬件培训成本。
你会推荐哪一个?

添加新的硬件以创建一个异构的环境。
要求另一年的销售和支持与现有的供应商。
请求更多的时间来考虑项目变更的总成本，并修改预算。
在web层上使用新的硬件，并将现有的硬件重新部署到其他层。

Answer: A

Question No : 71

Which two statements are true about java Cryptography Architecture (JCA)?
A. Any JCA provider must implement each supported category of algorithms.
B. Exactly one Implementation of each category of cryptographic algorithms must be provided.
C. Implementations of cryptographic algorithms can be plugged in to a JVM after it has been installed and at run time.
D. Categories of algorithms supported by JCA include message digests, signatures encryption, management, and random number generation.

关于java密码体系结构(JCA)，哪两种说法是正确的?

任何JCA提供者必须实现每个受支持的算法类别。
必须提供每一种加密算法的一种实现。
在安装和运行时，可以将加密算法的实现插入到JVM中。
JCA支持的算法类别包括消息摘要、签名加密、管理和随机数生成。

Answer: C,D

Question No : 72
You are the architect for XYZ bank. XYZ is redesigning their online banking offering and you need to ensure that the new design follows security best practices for the JEE platform.
Select three security best practices for JEE applications.
A. Schedule regular penetration testing.
B. Log all security related application events.
C. Implement an exception-handling strategy.
D. Encrypt data, both on the wire and at rest.
E. Use both programmatic and declarative security.
F. Treat users as untrusted even when authenticated.

您是XYZ银行的架构师。
XYZ正在重新设计他们的在线银行服务，您需要确保新的设计遵循JEE平台的安全最佳实践。
为JEE应用程序选择3个安全最佳实践。

定期进行渗透测试。
记录所有与安全相关的应用程序事件。
实现异常处理策略。
加密数据，无论是在线路上还是在其他地方。
使用编程和声明式安全。
在验证时，将用户视为不可信的。

Answer: B,C,E

Question No : 73
Oasis Corporation has decided to develop a single Instance multi-tiered application with its existing EIS resources.
You are the technical lead for the Integration team responsible for providing the following:
A common Interface that can easily access the heterogeneous EIS resources
Generic transaction mechanism support for EIS resource managers
A connection pool to legacy EIS resources
Which two technologies would you use to meet these requirements?
A. JMS
B. JDBC
C. JCA
D. JAX-WS
E. JAX-RS

Oasis公司已经决定开发一个单一的实例多层应用程序，并使用其现有的EIS资源。
您是集成团队的技术主管，负责提供以下内容:
可以很容易地访问异构EIS资源的公共接口
对EIS资源管理器的通用事务机制支持
对遗留的EIS资源的连接池
您将使用哪两种技术来满足这些需求?

Answer: B,C

Question No : 74
You are asked to propose a software deployment strategy that will reduce a client will also make deploying and testing their software stack more efficient.
Which element would you include in your proposal?
A. Vertically scalable platform
B. Horizontally scalable platform
C. Virtualized platform
D. Standard unit testing software

您被要求提出一种软件部署策略，该策略将减少客户端，也将使部署和测试他们的软件堆栈更加有效。
你的建议中包括哪些元素?

垂直可伸缩的平台
水平可伸缩的平台
虚拟化平台
标准单元测试软件

Answer: C

Question No : 75

The integration team has reported a problem in testing a few deployed MDBs.
By design, each MDB listens to one of four named queues. Two producers write messages to each queue.
The test issues messages of the same payload type that each producer will send, but varies the number or size of these messages to measure the messaging server’s performance.
The team has noticed that the utilization remains at the same high rate any time the test writes messages destined for the third MDB.
The message server log does not reveal any failure in sending messages to this MDB. Which anticipation expresses cause for this condition?
A. Hot Potato
B. Leaky Abstraction
C. Cache less Cow
D. Golden Hammer

集成团队报告了测试几个部署的mdb的问题。
通过设计，每个MDB将侦听四个已命名队列中的一个。
两个生产者向每个队列写消息。
测试将发出每个生产者将发送的相同有效负载类型的消息，但是不同消息的数量或大小来衡量消息传递服务器的性能。
该团队注意到，在测试为第三个MDB编写消息时，利用率保持在相同的高速率。
消息服务器日志没有显示向该MDB发送消息的任何失败。
哪一种预期表达了这种情况?

Answer: A

Question No : 76

A company that sells avatar skins tor virtual reality environments has a static website for advertising their wares.
The website was built using What You See Is What You Get (WYSIWYG) html editor and also contains a lot of JavaScript.
The company now wants to add server side processing capabilities developing a shopping application, the company is considering using JavaServer Faces (JSF)
Which statement is true?
A. The JavaScrip code has to be rewritten to conform to JSF standards.
B. JSF tags cannot be integrated into the HTML generated by WYSIWYG editors.
C. The web pages cannot be previewed accurately with a generic WYSIWYG HIML editor.
D. The web pages must be converted into Face lets.

一个销售虚拟现实环境的公司有一个静态网站来宣传他们的产品。
这个网站是用你所看到的(WYSIWYG)html编辑器构建的，并且还包含大量的JavaScript。
该公司现在想要添加服务器端处理功能来开发一个购物应用程序，该公司正在考虑使用JavaServer Faces(JSF)
声明是真的吗?

必须重写javascript代码，以符合JSF标准。
JSF标签不能集成到WYSIWYG编辑器生成的HTML中。
使用一个通用的WYSIWYG编辑器，不能准确地预览web页面。
网页必须转换成人脸。

Answer: C

Question No : 77

Which three actions represent best practices when implementing an exception handling strategy for an application?
A. Create a custom checked exception if an alternative action can be taken to resolve the exception.
B. Create a custom unchecked exception if the action to resolve the exception cannot be defined.
C. Always log the specific exception before re-throwing a wrapped exception.
D. Always throw exceptions in methods that are designed for exception handling.
E. Always include information specific to the error when logging an exception.

在为应用程序实现异常处理策略时，哪三个操作代表最佳实践?

创建一个定制的检查异常，如果可以采取另一个操作来解决这个异常。
创建一个自定义的异常，如果解决异常的操作不能被定义。
在重新抛出包装的异常之前，总是记录特定的异常。
总是在为异常处理设计的方法中抛出异常。
在记录异常时，总是包含特定于错误的信息。

Answer: A,B,E

Question No : 78

Which four services are guaranteed to be present in a specification compliant Java EE container?
A. Security
B. Persistence
C. Naming and messaging
D. Remote connectivity
E. Failover
F. Lifecycle management
G. Multithreading handling
H. Load balancing

哪四个服务保证会出现在符合规范的Java EE容器中?

Answer: A,B,D,F
Reference: http://www.slideshare.net/YogeshBindwal/introduction-to-javaee (slide 19)

Question No : 79
Your web page design company is designing websites for all the stores in a local mall. Your company must create a consistent "look and fool" for these sites.
After this "look and feel- project has gone through demonstration, enhancement and approval iterations with the mall's .lions,
you job is complete and the development of the actual B2C (Business –to-Client) system will be handled by a different firm
Which architecture is most appropriate for your prototype project?
A. Two tier, web-centric
B. Three, web-centric
C. Three-tier, enterprise-centric
D. Three-tier, application-centric

你的网页设计公司正在为当地一家购物中心的所有商店设计网站。
您的公司必须为这些站点创建一个一致的“外观和傻瓜”。
在这个“外观和感觉”之后，项目已经通过了商场的展示，增强和批准迭代，
您的工作已经完成，实际B2C(业务-客户端)系统的开发将由不同的公司来处理。
哪个架构最适合您的原型项目?

Answer: A

Question No : 80

Which two are objectives of the Abstract Factory pattern?
A. To create whole-part hierarchies
B. To create families of related objects
C. To enforce dependencies between concrete classes
D. To specify the types of objects to create by using a sample instance
E. To separate the construction of a complex object from its representation

哪两个是抽象工厂模式的目标?

创建整体与局部的层次结构
创建相关对象的家庭
为了加强具体类之间的依赖关系
通过使用示例实例来指定要创建的对象的类型
将复杂对象的构造与它的表示分离开来

Answer: B,C

Question No : 81

Which statement is true about the use of security-related annotations in an enterprise bean?
A. They can be used to specify permissions only on business methods.
B. They can be used to specify permissions on a class or its business methods.
C. They can be used to change an authentication mechanism.
D. They can be used to acquire a secure connection using SSL.
E. They can be inherited from a parent abstract class.

在企业bean中使用与安全相关的注释是正确的吗?

它们可以用来指定仅在业务方法上的权限。
它们可以用来指定类或其业务方法的权限。
它们可以用来更改身份验证机制。
它们可以使用SSL来获得安全连接。
它们可以从父类抽象类继承。

Answer: B

Question No : 82

Your application uses web services extensively and frequently to distribute large XML objects over HTTP.
In addition, the application has been set particularly demanding performance and scalability service level agreements (SLAs).
Which java API is best suited for your application?
A. STAX
B. DOM
C. JAXB
D. JAXR

您的应用程序广泛使用web服务，并且频繁地通过HTTP分发大型XML对象。
此外，应用程序已经设置了特别要求的性能和可伸缩性服务水平协议(sla)。
哪种java API最适合您的应用程序?

Answer: A

Question No : 83

StockTeller is a Java-based application designed to retrieve the current market for a portfolio of publicly listed stocks.
You have been tasked to design a bolt on module for StockTeller called EBroker, a Java E-based online application that needs to asynchronously communicate with StockTeller to retrieve market prices for securities in a secure manner.
Which web service technology would you choose to integrate StockTeller into the EBroker application?
A. JAX-WS using HTTP
B. JAX-WS using HTTPS
C. JAX-RPC using HTTP
D. JAX-RS using HTTPS

StockTeller是一种基于java的应用程序，用于检索上市股票组合的当前市场。
您的任务是为StockTeller设计一个名为EBroker的模块，它是一个基于Java的在线应用程序，它需要与StockTeller异步通信，以安全的方式检索证券的市场价格。
您将选择哪种web服务技术将StockTeller集成到EBroker应用程序中?

Answer: B

Question No : 84

While analyzing an application, you observe that it contains numerous Interfaces for complex domain logic.
Completing a business Function currently requires calling several of these interfaces in an order that is understood by system experts.
Which design pattern would you suggest to refactor the code?
A. Façade
B. MVC
C. DAO
D. Adapter
E. Decorator

在分析应用程序时，您可以观察到它包含了许多用于复杂域逻辑的接口。
目前，完成业务功能需要按系统专家所理解的顺序调用其中的几个接口。
您建议重构代码的设计模式是什么?

Answer: A

Question No : 85

During a security audit, it is noted that your application is vulnerable to SQL Injection attacks.
Which two action would you perform to address this vulnerability?
A. Use parameterized stored procedures with the embedded parameters.
B. Add a text input validation filter to check user-supplied data.
C. Configure user permissions in the deployment descriptor.
D. Configure security roles in the deployment descriptor.
E. Deploy the Internet facing nodes in a well defined demilitarized zone (DMZ) layer.
F. Use parameterized stored procedures with the principle of least privilege.

在安全审计期间，注意到您的应用程序很容易受到SQL注入攻击。
您将采取哪两个行动来解决这个漏洞?

使用参数化的存储过程和嵌入的参数。
添加一个文本输入验证过滤器来检查用户提供的数据。
在部署描述符中配置安全角色。
在一个定义良好的非军事化区域(DMZ)层部署Internet面对节点。
使用参数化存储过程与最少特权原则。

Answer: A,B

Question No : 86

ABC Travel offers a night reservation service, exposed as a web service. XYZ Stays offers a hotel reservation service, also exposed as a web service.
ABC and XYZ will not change their web service.
A startup company has contacted you for advice about designing a new service that combines flight and hotel reservations, which they will offer as a web service.
The startup company plans to provide their service by implementing a portable Java EE solution that aggregates the two services offered by ABC Travel and XYZ Stays, a combined reservation succeeded.
Only if both the flight reservation and the hotel reservation succeed
Which is the most effective way to meet the business requirement?
A. The startup company should implement their new service as a web service that uses an XA transaction manager.
B. The startup company cannot implement their new service as a web service, but must use an enterprise JavaBean (EJB) component to gain transaction propagation.
C. The startup company should implement their new service as a web service by calling the two existing services, and implementing their own compensating transaction.
D. The startup company can implement their new service as a web service by calling the two existing services in a single transaction, relying on transaction propagation to support this business rule.

ABC Travel提供了一个夜间预订服务，作为一个web服务公开。
XYZ提供酒店预订服务，也可以作为web服务公开。
ABC和XYZ不会改变它们的web服务。
一家创业公司已经联系了你，询问他们如何设计一种新的服务，将航班和酒店预订结合在一起，作为一种网络服务。
这家初创公司计划通过实现一个可移植的Java EE解决方案来提供他们的服务，该解决方案集合了ABC旅行和XYZ留下来的两个服务，一个联合的预订成功了。
只有在机票预订和酒店预订成功的前提下
什么是满足业务需求最有效的方法?

答:启动公司应该将他们的新服务作为一个使用XA事务管理器的web服务来实现。
启动公司不能将他们的新服务作为web服务来实现，但是必须使用enterprise JavaBean(EJB)组件来获得事务传播。
启动公司应该通过调用两个现有的服务来实现他们的新服务，并实现他们自己的补偿性交易。
启动公司可以通过在单个事务中调用两个现有的服务来实现它们的新服务，依赖于事务传播来支持这个业务规则。

Answer: C

Question No : 87

You are designing a bank application in which automated email reminders are sent to customers every 24 hours, starting from five days prior to a payment due date until the payment is made?
Which type of beans most closely match the implementation needs for this requirement?
A. Stateful session bean
B. Stateless session bean
C. Managed bean
D. Message-driven bean

您正在设计一个银行应用程序，在该应用程序中，自动电子邮件提醒每隔24小时发送给客户，从付款截止日期之前的5天开始，直到付款完成?
哪种类型的bean与此需求的实现需求最匹配?

Answer: D

Question No : 88

You are integrating with a single legacy Enterprise Information System. You are interested in the transaction management capabilities of Java Connector Architecture.
This new system needs the capability to invoke multiple operations against this single legacy system.
these operations succeeded together or fail together as a group.
To which minimum level of transaction management do you set your resource adapter?
A. No transaction
B. Local transaction
C. Distributed transaction
D. Container-managed transaction

您正在集成一个遗留的企业信息系统。
您对Java连接器体系结构的事务管理功能感兴趣。
这个新系统需要能够针对这个单一遗留系统调用多个操作。
这些操作成功地组合在一起，或者作为一个团队一起失败。
您设置资源适配器的最小级别的事务管理是什么?

Answer: B

Question No : 89

Your company is creating a Java EE corporate wide workflow system in winch significant internal business events are consumed by multiple applications.
Due to multi-year development plans, many of these applications do not exist yet, even at the design stage.
IT has defined standard data formats for these events in the form of small XML documents.
Also, the rules for how an application filters and processes events are not fixed In advance and can change over the life or the application.
Which combination of technologies is best for distributing and consuming these events throughout the company?
A. Relational database and JDBC
B. HTTP client library and servlets
C. Remote Method Invocation (RMI) and stateless session beans
D. Java Message Service (JMS) topics and message-driven beans
E. JMS queues and message-driven beans

您的公司正在创建一个Java EE企业范围的工作流系统，在绞车内部业务事件被多个应用程序消耗。
由于多年的开发计划，许多应用程序还不存在，甚至在设计阶段也不存在。
它以小型XML文档的形式定义了这些事件的标准数据格式。
另外，应用程序如何过滤和处理事件的规则不是预先确定的，并且可以在生命或应用程序中发生变化。
哪种技术组合最适合在整个公司中分配和使用这些事件?

关系数据库和JDBC
HTTP客户端库和servlet
远程方法调用(RMI)和无状态会话bean
Java消息服务(JMS)主题和消息驱动bean
JMS队列和消息驱动bean

Answer: D
Question No : 90
YourDocs is an application that retrieves PDF documents of selected topics from both trusted and untrusted websites.
It has been developed using a non-Java technology. You are designing your Mlearn, a mobile-based e-learning application, which will be implemented in Java. You plan to integrate YourDocs with your application.
Which web service technology would you choose to Integrate YourDocs into the YourMLearn application?
A. JAX-WS
B. JAX-WS with REST
C. JAX-RPC
D. JAX-RS

您的文档是一个应用程序，它从受信任的和不受信任的网站中检索所选主题的PDF文档。
它是使用非java技术开发的。
您正在设计Mlearn，一个基于移动的电子学习应用程序，它将在Java中实现。
您计划将您的文档与您的应用程序集成在一起。
您选择哪种web服务技术将您的文档集成到您的mlearn应用程序中?

Answer: D