Your web application wants to make use of a role named 'manager', which is defined in the servlet container. Which of the following XML fragments must occur in the deployment descriptor of your web application? 1. <role name='manager' /> 2. <role> <role-name>manager</role-name> </role> 3. <role>manager</role> 4. <security-role> <role-name>manager</role-name> </security-role> I think the answer is 4 but given answer is 2 , I don't know why , am I missing something ?