About Question enthuware.jwpv6.2.894 :

[ETS User]

The right answer is the option 4.

<security-role>
<role-name>boss</role-name>
<role-name>manager</role-name>
</security-role>

is NOT valid for web.xml schema: two <role-name> element in the same
<security-role> are NOT allowed

[admin]

You are right. It has now been fixed.

thank you for your feedback!