Certificação 1.4 ou 1.5

Topic

Objective

310-080

310-081

Section 1 – The Servlet
Technology Model

Y

Y

Servlet
Model

• Purpose of HTTP
  methods (HEAD, GET, POST, etc).


• Corresponding
  HttpServletMethods for each of the above.


• Triggers that cause a
  client / browser to use that method.
• Technical
  characteristics of HTTP method protocol.

Y

Y

Y

Y

Y

Y

Y

Y

HttpServletRequest
Interface

Using

this interface write code to: (also identify interface and method name for
each)

• Retrieve HTTP request header information.
• Retrieve HTML form parameters from the request.
• Retrieve a Servlet initialization parameter.
• Retrieve cookies from the request.

Y

Y

Y

N

Y

Y

N

Y

HttpServletResponse
Interface

Using
this interface write code to: (also identify interface and method name for
each)

• Set an HTTP Response
  header.


• Set the content type
  of the response.


• Acquire a text stream
  for the response.
• Acquire a binary
  stream for the response.


• Redirect an HTTP
  request to another URL.


• Add cookies to the
  response.


• Identify interface
  and method to access values and resources and set object attributes
  within Request, Session and Context scope.

Y

Y

Y

Y

Y

N

Y

Y

Y

Y

Y

Y

Y

N

Servlet
Life Cycle

Describe
purpose and event sequence of the servlet life cycle: Identify statements
about purpose and how it is invoked

• Servlet class loading.


• Servlet Instantiation.
• Call init method.


• Call service method.


• Call destroy method.


• Use RequestDispatcher
  to include / forward a Web service. (covered in Section 3 for 310-081)

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Section 2– Structure and
Deployment of web applications

Y

Y

Web
Application

Construct
the file and directory structure of a Web application that contains

• Static content.
• JSP pages.


• Servlet classes.


• Deployment Descriptor.


• Tag Libraries.


• JAR Files.


• Java class files.

• Describe how to
  protect resources from HTTP access.


• Describe purpose and
  semantics of deployment descriptor

Servlet Instance.

Servlet name.

Servlet class.

Initialization parameters.

URL to servlet mapping.

• Construct correct
  structure of deployment descriptor.
• Explain purpose of
  WAR file – Describe construction of a WAR file

N

N

Y

Y

N

Y

Y

N

Y

Y

N

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Section 3

Web Container Model
(called Servlet Container Model in 080)

Y

Y

ServletContext

For
the ServletContext initialization parameters: write servlet code to:

• Access initialization
  parameters.


• Create Deployment
  descriptor elements for declaring initialization parameters.


• Servlet context
  listeners, attribute listener.

Y

Y

Y

Y

Y

N

Servlet
Attribute scopes

• For the servlet attribute scopes (Request, Session and Context) write servlet code to Add, retrieve and remove attributes.
• Identify proper scope for an attribute.
• Identify multithreading issues for each scope.
• Session attribute listeners.

N

N

N

N

Y

Y

Y

Y

Y

N

Web
Container Request processing model

• Describe the model.


• Write and configure a
  filter.


• Create a request
  wrapper.


• Create a response
  wrapper.


• Describe how to apply
  a filter or a wrapper for a design problem.

N

N

N

N

N

Y

Y

Y

Y

Y

Web
Container Life Cycle

• Describe the Web
  container life cycle event model for requests, sessions and web
  applications


• Create and configure
  listener classes for each scope life cycle.


• Create and configure
  scope attribute listener classes.


• For a scenario,
  identify the proper attribute listener to use.


• Describe the
  RequestDispatcher mechanism.


• Write servlet code to
  create a request dispatcher.
• Write servlet code to
  forward or include the target resource.


• Identify and describe
  the additional request-scoped attributes provided by the container to
  the target resource.

N

N

N

N

N

N

N

N

N

Y

Y

Y

Y

Y

Y

Y

Y

Y

Section 4: Session
Management

Y

Y

Session
Object

• Write servlet code to store objects into a session object.
• Write servlet code to retrieve objects from a session object.
• Given a scenario describe the APIs used to access the session object, explain when the session object was created.
• Describe the mechanisms used to destroy the session object, and when it was destroyed.
• Expunge (erase) a session object.

Y

Y

Y

Y

Y

Y

Y

Y

Y

N

Session
Listeners

• Using session
  listeners, write code to respond to an event when an object is added to
  a session.
• Using session
  listeners, write code to respond to an event when a session object
  migrates from one VM to another.

Y

N

Y

Y

Session
Management

• Given a scenario,
  describe which session management mechanism the Web container could
  employ.


• How cookies might be
  used to manage sessions.
• How URL rewriting
  might be used to manage sessions.


• Write servlet code to
  perform URL rewriting.

Y

N

Y

Y

Y

Y

Y

Y

Section 5: Web Application
Security

Y

Y

Security
Mechanisms

Based on the servlet specification, compare and
contrast the following security mechanisms:

• Authentication.


• Authorization.


• Data integrity.
• Confidentiality.


• Auditing, malicious
  code and website attacks.

Y

Y

Y

Y

Y

Y

Y

Y

Y

N

Deployment
Descriptor

In the deployment descriptor declare the
following:

·
A security constraint.

·
A Web resource.

·
The transport guarantee.

·
The login configuration.

·
Security role.

Y

Y

N

Y

Y

Y

Y

Y

Y

Y

Authentication
types