...
Ajax Toolkit (see https://tddprojects.atlassian.net/wiki/pages/createpage.action?spaceKey=SF&title=Old%20Stuff&linkCreation=true&fromPageId=1310556166 also)
Callouts via Apex with a Visualforce Controller
VF page requests data from VF Controller.
Controller does the callout to get the data.
Look wow, this would have been mindbreaking revolutionary stuff back in 2003 but now it’s just something you do regularly.
SOAP callouts
REST callouts
Security
Secure Transport over HTTP (HTTPS)
Implemented at the Application Layer
Network Segments are encrypted end-to-end in the transport layer (TLS)
One way SSL is enabled by default.
Two way SSL needs self-signed or CA-signed certificates
For the exam only, not reality now with many different options available…
Apex code ignores profile based security.
Can respect or ignore record level security.
...