Java EE 6 Web Services Developer Certified Expert

Here you have the best Oracle 1z0-897 practice exam questions

You have 120 total questions to study from
Each page has 5 questions, making a total of 24 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 28, 2025
This site is not affiliated with or endorsed by Oracle.

Question 1 of 120

An airline built and deployed a back-end application to manage reservations. To support interoperability with as large a base of standalone client applications as possible, the services provided by this back-end application are exposed as XML-based restful web services. Management just added a new requirement that
AJAX-based web application clients be supported, too. One of the developers suggested that it is enough to extend the existing application to support both XML- based and JSON-based restful web services. Assuming the developer is correct, choose the sentence that best describes an attempt to introduce this ability as this developer suggests (Choose one):

The attempt will fail, because JAX-RS does not support both XML- and JSON- based restful services in parallel.

The attempt will be trivial to implement, since JAX-RS just needs for the application to specify that both XML- and JSON-based interaction will be supported.

The attempt can succeed, but it will require a significant amount of new code, since JAX-RS does support both XML- and JSON-based interaction - but not single resource can support both kinds of interaction simultaneously.

The attempt will fail, because there is more to the difference between XML-based and JSON-based interactions than just the data representation used.

Correct Answer: B

Question 2 of 120

An organization has business logic implemented in EJB components. Current clients use container-managed, role-based security to access the business logic using RMI. Management has determined that the business logic must be made available to non-RMI clients using a Web service. Which container-managed Web service security mechanism would the development team?use to allow Web service clients to use the current security model? (Choose one)

XKMS

XACML

XML Digital Signature

HTTP Basic Authentication

annotations mapped to the JAX-WS runtime

Correct Answer: D

Question 3 of 120

A developer creates a Web service for his company's inventory service. He uses servlet container to deploy the web service and wants to enable basic authentication for all web service invocations. Where does the developer configure security requirements for the above case?

sun-jaxws.xml

web.xml

webservices.xml

domain.xml

Correct Answer: B

Question 4 of 120

Choose the option that best describe the deployer's choices, when deploying an EJB that is also exposed as a RESTful web service using JAX-RS (Choose one):

The EJB can only be deployed to a web container, since RESTful access to the EJB requires a web container to support the HTTP interaction needed.

The EJB can be deployed to any EJB or web container that would support local references to the EJB from the JAX-RS runtime in the ejb container.

The EJB can be deployed to any EJB or web container that would support local references to the EJB from the JAX-RS runtime in the web container.

The EJB can be deployed to an EJB or web container that is visible to the JAX-RS runtime, even on an application server separate from the JAX-RS runtime,

Correct Answer: C

Question 5 of 120

Given the JAX-RS root resource class fragment:
Exam 1z0-897: Question 5 - Image 1

Choose the statement that best describes the configuration that would be required to support the access control constraint shown:

No further configuration is required - the JavaEE runtime will pick up the security constraint and configure the web container to match.

The developer will have to configure the web container to require authenticated access to the URLs corresponding to this resource, so the proper information can be propagated to the EJB container.

The developer will have to turn on authentication in the web container configuration file, so that all incoming requests are authenticated in order to be processed.

The developer will have to configure the web container to require authenticated access to the URLs corresponding to this resource, and then map web-tier roles to ejb-tier roles, since the JAX-RS and EJB runtimes cannot use the same set of roles.

Correct Answer: B