SUN Sun Certified Web Component Developer for J2EE 5 Sample Questions:

1. Which method must be used to encode a URL passed as an argument to
HttpServletResponse.sendRedirect when using URL rewriting for session tracking?

A) HttpServletResponse.encodeURL
B) HttpServletResponse.encodeRedirectURL
C) ServletResponse.encodeURL
D) ServletResponse.encodeRedirectURL

2. Which JSTL code snippet produces the output "big number" when X is greater than 42, but outputs "small number" in all other cases?

A) <c:choose>
< c:when test='<%= (X > 42) %>'>big number</c:when>
< c:otherwise>small number</c:otherwise>
< /c:choose>
B) <c:if test='<%= (X > 42) %>'>
< c:then>big number</c:then>
< c:else>small number</c:else>
< /c:if>
C) <c:if>
< c:then test='<%= (X > 42) %>'>big number</c:then>
< c:else>small number</c:else>
< /c:if>
D) <c:choose test='<%= (X > 42) %>'>
< c:when>big number</c:when>
< c:otherwise>small number</c:otherwise>
< /c:choose>
E) <c:choose test='<%= (X > 42) %>'>
< c:then>big number</c:when>
< c:else>small number</c:otherwise>
< /c:choose>

3. Given:
6. <myTag:foo bar='42'>
7. <%="processing" %>
8. </myTag:foo>
and a custom tag handler for foo which extends TagSupport.
Which two are true about the tag handler referenced by foo? (Choose two.)

A) The doStartTag method is called once.
B) The doAfterBody method is NOT called.
C) The SKIP_PAGE constant is a valid return value for the doStartTag method.
D) The EVAL_BODY_BUFFERED constant is a valid return value for the doStartTag method.
E) The EVAL_PAGE constant is a valid return value for the doEndTag method.

4. Click the Exhibit button.
Assuming the tag library in the exhibit is imported with the prefix stock, which custom tag invocation outputs the contents of the variable exposed by the quote tag?

A) <stock:quote symbol="SUNW" var="quote" />
$ {quote}
B) <stock:quote symbol="SUNW" />
$ {var}
C) ${var}
< stock:quote symbol="SUNW" />
D) <stock:quote symbol="SUNW" var="quote">
< %= quote %>
< /stock:quote>
E) <stock:quote symbol="SUNW">
${var}
< /stock:quote>

5. You have been contracted to create a web site for a free dating service. One feature is the ability for one client to send a message to another client, which is displayed in the latter client's private page. Your contract explicitly states that security is a high priority.
Therefore, you need to prevent cross-site hacking in which one user inserts JavaScript code that is then rendered and invoked when another user views that content. Which two
JSTL code snippets will prevent cross-site hacking in the scenario above? (Choose two.)

A) <c:out value='${message}' escapeXml='true' />
B) <c:out value='${message}' eliminateXml='true' />
C) <c:out value='${message}' />
D) <c:out>${message}</c:out>
E) <c:out eliminateXml='true'>${message}</c:out>

Solutions: