Question 11 of HFSJ Final mocktest

Given these fragments from within a single tag in a Java EE DD:

Which are true? (Choose all that apply.)
A. A Java EE DD can contain a single tag in which all of these tags can legally co-exist.
B. It is valid for more instances of <auth-constraint> to exist within the single tag described above.
C. It is valid for more instances of <user-data-constraint>
to exist within the single tag described above.
D. It is valid for more instances of <url-pattern> to exist within the <web-resource-collection> tag described above.
E. It is valid for other tags of the same type as the single encasing tag described above to have the same <url-pattern> as the tag above.
F. This tag implies that authorization, authentication, and data integrity security features are all declared for the web application.

Answer is ABDEF

but how it is ensuring authentication? authentication is the job of <login-config> tag. it is only providing authorization and data confidentiality . please clear my doubt.

thanks
geeta

but how it is ensuring authentication? authentication is the job of <login-config> tag. it is only providing authorization and data confidentiality . please clear my doubt.

You are referring to answer F, right ? The answer says : "This tag implies that authorization, authentication, and data integrity security features are all declared for the web application.". There is no login-config tag here, but it implies that there is one, otherwise the tags included in the question would be of no use.