Enthuware

Option 4 is supposed to be correct (green highlighted in the solution):

"There is no need to put any directive for this purpose.
Because, by default, session is available."

And here goes the explanation:

"The session attribute indicates that the page requires participation in an (http) session. If it is set to "true" then the implicit script language variable named 'session' of type javax.servlet.http.HttpSession references the current/new session for the page. If "false" then the page does not participate in a session; the implicit variable is unavailable, and any reference to it within the body of the JSP page is illegal and will result in a fatal translation error. Default is "true"."

I think this is a little bit contradictory... isn't it?

Why do you think it is contradictory? By default, i.e. if you do not have this directive at all, the session will be available. You can explicity specify it to true as well but it is not necessary.