An ejbRemove() call from the container removes the bean instance and puts it out for the garbage collector.

An ejbCreate() call is made by the container only when a client invokes a create method.

You can get the security information about a client from inside the ejbCreate() method.

The container will call the setSessionContext() method only once.

All of the above.