Multiple choice technology security

Choose the correct answer: a. Session Timeouts can be defined in the web.xml as below: Time-in-minutes b. Session Timeouts can be defined in the server.xml as below: Time-in-minutes c. Session Timeouts cannot be defined in the deployment descriptor

  1. a

  2. b

  3. c

  4. a AND b

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Session timeout is configured in web.xml within the session-config element. This is the standard deployment descriptor for Java web applications. Server.xml is for server-wide global settings, not application-specific session configuration.