Which one of the following statements is valid regarding credential objects?

• A. Passive credential objects hide the credential's secret from the portlet.
• B. Portlets that use active credential objects need to extract the secret from the credential to authenticate with the backend.
• C. To create a slot for storing active credentials, set the active parameter of the CredentialVaultService.createSlot method to true.
• D. Credential objects are serializable.

Evan needs to share action URL parameters used in a portlet with another portlet. In the binding section of the WSDL files used for specifying a portlet's participation with the property broker, an action URL parameter can be bound to several scopes. Which one of the following options best describes the scopes that Evan can use to share the action URL parameters using the property broker?

• A. Request attribute, Request parameter, or Session attribute
• B. Session attribute only
• C. Request parameter or Session attribute
• D. Page attribute, Request attribute, Request parameter, Session attribute

Hershel wants to programmatically check if specific users have access to his company's new portlet application, in order to show a message in another portlet asking them to purchase a subscription. He is trying to do so with the least amount of performance overhead. What would be the best way for Hershel to accomplish this?

• A. He should read role assignments using the com.ibm.portal.ac.RoleData interface and ensure portlet caching is enabled.
• B. He should use AccessControlRuntimeModel or AccessControlGlobalRuntimeModel to verify explicit role assignments.
• C. He should use the com.ibm.portal.ac.UserRoles interface to verify explicit role assignments.
• D. He should use the com.ibm.portal.ac.RoleData interface to verify explicit role assignments.

A client wants to write several portlets for their new website. Each portlet must be labeled and record some trace information whenever it is accessed. The portlets must share common information with each other as well. When discussing best practices options with the client, which of the following would not be recommended?

• A. Each portlet can be labeled by its own title bar.
• B. Trace information can be logged to log files.
• C. JSPs should be used to separate output and functionality of the portlets.
• D. Portlets communicate via writing to a common file in the root directory.

A client named Rudy's Rocking Hot Rods sells high-end motor vehicles through its customized portal. When a user logs in, they are presented with several combinations of portlets and iWidgets. The user can select a car model, color, customize finishes, and perform other applicable actions. As part of a new development phase, the client has requested two updates: 1) Wire Portlet ABC to send an event to the iWidget XYZ. 2) Wire iWidget XYZ to send an event to the Portlet RSA. What option below is not correct, assuming all portlets on the page are JSR 286compatible?

• A. When passing a mashup type from iWidget XYZ to Portlet RSA, which uses XSD types, that type must be manually converted because IBM WebSphere Portal does not provide an automatic type conversion mechanism.
• B. If Portlet ABC defines a Java class in its portlet.xml under the element as "java.lang.String," it is able to pass that value to iWidgetXYZ.
• C. iWidget XYZ will be able to receive events from Portlet ABC and send events to Portlet RSA.
• D. If Portlet ABC uses a custom type defined as follows: org.za.StrongTypedthen the iWidget XYZ needs to have a corresponding payload definition as such: