Question about login-config

[Win Yu]

Which of the following XML frgaments correctly define the login-config element of web.xml?
1.
<login-config>
<auth-method>CLIENT-CERT</auth-method>
<realm-name>test</realm-name>
</login-config>
2.
<login-config>
<auth-method>CLIENT-CERT</auth-method>
<realm-name>test</realm-name>
<form-login-config>
<form-login-page>/jsp/login.jsp</form-login-page>
<form-error-page>/jsp/error.jsp</form-error-page>
</form-login-config>
</login-config>

3.
<login-config>
<auth-method>FORM</auth-method>
<realm-name>test</realm-name>
<form-login-config>
<form-login-page>/jsp/login.jsp</form-login-page>
<form-error-page>/jsp/error.jsp</form-error-page>
</form-login-config>
</login-config>
4.
<login-config>
<auth-method>FORM</auth-method>
<realm-name>test</realm-name>
</login-config>
5.
<login-config>
<auth-method>SECURE</auth-method>
<realm-name>test</realm-name>
</login-config>
The answer given is 1,2,3. Why 2 is correct?

[Gagan Indus]

depends upon what is their definition of correct
i say 2 might be correct [ in the sense that it will work ] , but it is not appropriate for sure
------------------
Gagan (/^_^\) SCJP2
Die-hard JavaMonk -- little Java a day , keeps u going .

[Win Yu]

I do find some problem in JWeb+'s mock test. Did they ever check it. I doubt.

[Paul Anilprem]

It's QID is 996515982693
For option 2, it says:
For CLIENT-CERT, <form-login-config> is not needed. But it's not wrong if present.

It possible to have some problems and we apologise for it. We do try our best to resolve them but nobody is perfect. Please do continue to help us by reporting any problems that you may encounter.
thanks,
Paul.
------------------
SCJP2, SCWCD Resources, Free Question A Day, Mock Exam Results and More!
www.jdiscuss.com
Get Certified, Guaranteed!
JQPlus - For SCJP2
JWebPlus - For SCWCD
JDevPlus - For SCJD

[Timber Lee]

what is meaning of </realm-name> and how to use it?