About Question enthuware.jwpv6.2.989 :

[himaiMinh]

The question is asking "which of the following things can be done (independent of each other)....?"

I think if we specify a security-role-ref for boss in web.xml, we should also specify <security-role>.
So, <security-role-ref> is actually dependent on <security-role>.

[admin]

You are right. Removed the "independent part".
thank you for your feedback!
Paul.