Spring Professional Certification Exam Tutorial - Module 06

Question 01 - What are authentication and authorization? Which must come first?

Question 02 - Is security a cross cutting concern? How is it implemented internally?

Question 03 - What is the delegating filter proxy?

Question 04 - What is the security filter chain?

Update:

Please have a look at the Spring Security documentation to see the official list and order of those filter in Spring 5.1.6:

https://docs.spring.io/spring-security/site/docs/5.1.6.RELEASE/reference/htmlsingle/#filter-ordering

Thank you Helen Ma for pointing this.

Question 05 - What is a security context?

Question 06 - What does the ** pattern in an antMatcher or mvcMatcher do?

Question 07 - Why is the usage of mvcMatcher recommended over antMatcher?

Question 08 - Does Spring Security support password hashing? What is salting?

Question 09 - Why do you need method security? What type of object is typically secured at the method level (think of its purpose not its Java type).

Question 10 - What @PreAuthorized and @RolesAllowed annotations do? What is the difference between them?

Question 11 - How are @PreAuthorized and @RolesAllowed annotations implemented?

Question 12 - In which security annotation are you allowed to use SpEL?