Enthuware

For the given question

A client has successfully called a business method on a stateless session bean. Which of the following statements may be true?

the solution

The method has been excluded from the security restrictions.

is a little bit to vague, to exclude a method from the security restriction can mean:

• 1.I don't have the method at all in the security restriction
  2. I use the exclude-list element.

If one is choose 1 then the method can be access by everybody (like a @PermitAll)
If I chose 2 then nobody can use it/call.

IMHO the proper formulation can be "The method has been excluded from the security restrictions using the exclude-list element in the deployment descriptor."

Best Regards,
Mihai

Good point. This has now been updated.

thank you for your feedback!
Paul.