6.2.1 Filter Lifecycle
The doFilter method of a filter will typically be implemented following this or
some subset of the following pattern:
1. The method examines the request’s headers.
4. The filter may invoke the next entity in the filter chain. The next entity may be
another filter, or if the filter making the invocation is the last filter configured in the
deployment descriptor for this chain, the next entity is the target Web resource. The
invocation of the next entity is effected by calling the doFilter method on the
FilterChain object, and passing in the request and response with which it was
called or passing in wrapped versions it may have created.
The filter chain’s implementation of the doFilter method, provided by the
container, must locate the next entity in the filter chain and invoke its doFilter
method, passing in the appropriate request and response objects.
Alternatively, the filter chain can block the request by not making the call to invoke
the next entity, leaving the filter responsible for filling out the response object.
A typical implementation of this method would follow the following pattern:
1. Examine the request
2. Optionally wrap the request object with a custom implementation to filter content or headers for input filtering
3. Optionally wrap the response object with a custom implementation to filter content or headers for output filtering
- Either invoke the next entity in the chain using the FilterChain object (chain.doFilter()),
- or not pass on the request/response pair to the next entity in the filter chain to block the request processing
5. Directly set headers on the response after invocation of the next entity in the filter chain.
The combination of authorization constraints that name roles or that imply roles via
the name “*” shall yield the union of the role names in the individual constraints as
permitted roles. A security constraint that does not contain an authorization
constraint shall combine with authorization constraints that name or imply roles to
allow unauthenticated access. The special case of an authorization constraint that
names no roles shall combine with any other constraints to override their affects and
cause access to be precluded.
I think that the answer is NO. I can't say from my experience but since the exam is offered by Pearson VUE I think that drag & drop questions were removed from this exam.
10) Are there any drag and drop questions on the 1z0 - 858 exam?
- there is no output
I get nothing in the output corresponding to this EL