Oracle 1Z0-858 Exam Overview:
| Certification Vendor: | Oracle |
| Exam Name: | Java Enterprise Edition 5 Web Component Developer Certified Professional Exam |
| Exam Number: | 1Z0-858 |
| Exam Price: | Approx. $245 USD |
| Certificate Validity Period: | Indefinite (legacy certification) |
| Real Exam Qty: | 69 |
| Related Certifications: | Oracle Certified Professional, Java SE Programmer |
| Available Languages: | English |
| Exam Format: | Multiple Choice, Multiple Answer |
| Exam Duration: | 150 minutes |
| Passing Score: | 68% - 72% |
| Recommended Training: | Oracle University - Web Component Development with Servlet and JSP |
| Exam Registration: | Pearson VUE Registration Oracle Certification Portal |
| Sample Questions: | Oracle 1Z0-858 Sample Questions |
| Exam Way: | Authorized Pearson VUE test center or online proctored exam |
| Pre Condition: | Recommended: Oracle Certified Professional, Java SE Programmer or equivalent Java knowledge |
| Official Syllabus URL: | https://education.oracle.com/ |
Oracle 1Z0-858 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Expression Language (EL) and Standard Actions | 10% | - Standard JSP actions - Accessing JavaBeans and collections - EL syntax and operators |
| Topic 2: Session Management | 10% | - Session tracking mechanisms - Session attributes and scope - Session lifecycle |
| Topic 3: Web Container Model | 10% | - Filters and interceptors - Container services - Event listeners |
| Topic 4: JSTL and Custom Tag Development | 12% | - Tag handler lifecycle - Tag files and descriptors - JSTL core and formatting tags |
| Topic 5: JSP Technology Model | 13% | - Elements and syntax - Implicit objects - JSP lifecycle |
| Topic 6: Design Patterns and Architecture | 8% | - Intercepting Filter, Front Controller - MVC pattern - Service Locator, Business Delegate |
| Topic 7: Web Application Structure and Deployment | 10% | - WAR file structure - Deployment descriptor (web.xml) - Annotations for configuration |
| Topic 8: Servlet Technology Model | 15% | - Servlet lifecycle - Request and response handling - Servlet configuration and initialization |
| Topic 9: Web Application Security | 12% | - Data protection and transport security - Authentication methods - Authorization and roles |
Oracle Java Enterprise Edition 5 Web Component Developer Certified Professional Sample Questions:
1. Assume the custom tag my:errorProne always throws a java.lang.RuntimeException with the message "File not found."
An error page has been configured for this JSP page.
Which option prevents the exception thrown by my:errorProne from invoking the error page mechanism, and outputs the message "File not found" in the response?
A) <c:try>
<my:errorProne />
<c:catch var="ex" />
${ex.message}
</c:try>
B) <c:try catch="ex">
<my:errorProne />
</c:try>
${ex.message}
C) <c:catch var="ex">
<my:errorProne />
</c:catch>
${ex.message}
D) <my:errorProne>
<c:catch var="ex">
${ex.message}
</c:catch>
</my:errorProne>
E) <c:try>
<my:errorProne />
</c:try>
<c:catch var="ex" />
${ex.message}
2. Squeaky Beans Inc. hired an outside consultant to develop their web application. To finish the job quickly, the consultant created several dozen JSP pages that directly communicate with the database. The Squeaky business team has since purchased a set of business objects to model their system, and the Squeaky developer charged with maintaining the web application must now refactor all the JSPs to work with the new system. Which pattern can the developer use to solve this problem?
A) Service Locator
B) Transfer Object
C) Business Delegate
D) Intercepting Filter
3. Given this fragment in a servlet:
23.
if(req.isUserInRole("Admin")) {
24.
// do stuff
25.
}
And the following fragment from the related Java EE deployment descriptor:
812.
<security-role-ref>
813.
<role-name>Admin</role-name>
814.
<role-link>Administrator</role-link>
815.
</security-role-ref>
900.
<security-role>
901.
<role-name>Admin</role-name>
902.
<role-name>Administrator</role-name>
903.
</security-role>
What is the result?
A) If line 24 executes, the user's role will be Admin.
B) The deployment descriptor is NOT valid.
C) Line 24 can never be reached.
D) If line 24 executes the user's role will NOT be predictable.
E) If line 24 executes, the user's role will be Administrator.
4. Which method must be used to encode a URL passed as an argument to HttpServletResponse.sendRedirect when using URL rewriting for session tracking?
A) HttpServletResponse.encodeRedirectURL
B) ServletResponse.encodeURL
C) HttpServletResponse.encodeURL
D) ServletResponse.encodeRedirectURL
5. Which two statements are true about using the isUserInRole method to implement security in a Java EE application? (Choose two.)
A) It can be used independently of the getRemoteUser method.
B) Using the isUserInRole method overrides any declarative authentication related to the method in which it is invoked.
C) Can return "true" even when its argument is NOT defined as a valid role name in the deployment descriptor.
D) Using the isUserInRole method overrides any declarative authorization related to the method in which it is invoked.
E) It can be invoked only from the doGet or doPost methods.
Solutions:
| Question # 1 Answer: C | Question # 2 Answer: C | Question # 3 Answer: E | Question # 4 Answer: A | Question # 5 Answer: A,C |
We're so confident of our products that we provide no hassle product exchange.


By Merlin

