Enthuware

Hi,

Isn't correct:
CUSTOM is not a valid auth-method value. Only BASIC, FORM, DIGEST, and CLIENT-CERT are permitted.

as:

http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd
<xsd:complexType name="auth-methodType">
<xsd:annotation>
<xsd:documentation>

The auth-methodType is used to configure the authentication
mechanism for the web application. As a prerequisite to
gaining access to any web resources which are protected by
an authorization constraint, a user must have authenticated
using the configured mechanism. Legal values are "BASIC",
"DIGEST", "FORM", "CLIENT-CERT", or a vendor-specific
authentication scheme.

Used in: login-config

</xsd:documentation>
</xsd:annotation>

<xsd:simpleContent>
<xsd:restriction base="j2ee:string"/>
</xsd:simpleContent>
</xsd:complexType>

I think for the purpose of the exam, CUSTOM is not a valid option.

Thanks for the feedback!

maybe, but according to specification it permits to use any value.