In which three ways are Security filters used in Spring Security? (Choose three.)

In which three ways are Security filters used in Spring Security? (Choose three.)
A . To provide risk governance.
B . To drive authentication.
C . To manage application users.
D . To provide a logout capability.
E . To enforce authorization (access control).
F . To encrypt data.

View Answer

Answer: BDE

Explanation:

Spring Security uses a filter-based architecture to provide security services for web applications. A filter is an object that intercepts HTTP requests and responses and performs some logic before or after the request is processed by the servlet.

Spring Security provides a number of filters for different purposes, such as:

Authentication: Filters that handle the authentication process, such as UsernamePasswordAuthenticationFilter, BasicAuthenticationFilter, RememberMeAuthenticationFilter, etc.

User management: Filters that manage the user details and roles, such as SecurityContextPersistenceFilter, AnonymousAuthenticationFilter, ConcurrentSessionFilter, etc. Logout: Filters that handle the logout process, such as LogoutFilter and SecurityContextLogoutHandler.

Authorization: Filters that enforce access control rules based on the user’s authentication and roles, such as FilterSecurityInterceptor, ExceptionTranslationFilter, etc.

Reference: https://www.javadevjournal.com/spring-security/spring-security-filters/