Briefly describe the java.security.policy class.

What will be an ideal response?

The java.security.Policy class is an abstract class for representing the system security policy for a Java application environment. The security policy is represented by a Policy subclass providing an implementation of the abstract methods in this Policy class. Only one Policy object can be in effect at any given time. The source location for the policy information used by the Policy object can be of different implementations. The policy configuration can be stored in a flat ASCII file, a serialized binary file of the Policy class, or in a database. By default, the J2SDK provides a file-based subclass implementation, which was upgraded to support Principal-based grant entries in policy files in version 1.4.