The security measures implemented in IB are URL-based security and Authentication & Authorization for the web application. URL-based security restricts access based on URL patterns, while authentication/authorization controls user access to web resources. Option C (EJB authentication) is marked as incorrect, suggesting it's not implemented in this specific environment.