Which two pieces of&

Which two pieces of information are needed when declaring the web resource collection in the deployment descriptor？（）

• A the URL pattern that requires authorization
• B the HTTP methods that require authorization
• C the users allowed access to the web resource
• D the J2EE roles allowed access to the web resource
• E the authentication mechanism required by the web resource