An administrator configured Web authentication for a Web module deployed in an application server to protect the URL. After this configuration, application users could not load images that are protected on the web page.
In addition to configuring com.ibm.wsspi.security.web.webAuthReq as a JVM custom property, which two property values can an administrator set to resolve the problem? (Choose two.)
To resolve the problem of users not being able to load protected images after configuring Web authentication, the administrator should set the values for com.ibm.wsspi.security.web.webAuthReq to 'lazy' or 'eager'. The 'lazy' value allows unauthenticated users to access resources until they attempt to access a protected resource, while the 'eager' value requires authentication upfront but also ensures that resources like images are accessible after login. These settings help in managing the authentication behavior to permit loading of protected resources when required.
Answers: A & C https://www.ibm.com/docs/en/was/9.0.5?topic=applications-web-authentication-settings