B. SetHelpString
Suppose You develop an ASP.NET Web applicationfor Company?s intranet. The application accesses data that is stored in a Microsoft SQL Serverdatabase. The application authenticates users by using Windows authentication, and it hasimpersonation enabled. You configure database object permissions based on the identity of theuser of the application. You need to provide the user?s identity to the SQL Server database. Whatshould you do?A. Connect to the database by using the following connection string?Persists Security Info=False;Integrated Security=SSPI;database=ApplicationDB;server=DataServer;?B. Connect to the database by using the following connection string?User ID=ASPNET;Persist Security Info=False;Integrated Security=False;database=ApplicationDB;server=DataServer;?C. Develop a serviced component that wraps all database operations.Use COM+ role-based security to restrict access to database operations based on useridentity.D. Disable impersonation.
Suppose You develop an ASP.NET Web applicationthat writes to an event log named EventLog1. All managers in Company will run this application.During a exam on a manager?s client computer, the application fails in the following codesegment. (Line numbers are includes for reference only.)1. Dim EventLog1 As New EventLog2. If Not EventLog.SourceExists(?CompanyWebApp?) Then3. EventLog.CreateEventSource(?CompanyWebApp?, ?Application?)4. End If5. EventLog1.Source = ?CompanyWebApp?6. EventLog1.WriteEntry(?The event occurred.?)You need to ensure that event data is written to EventLog1. You want to achieve this goal withoutgranting unnecessary permissions.What should you do?A. Insert the following code into the application.Dim eventLogDir As StringeventLogDir = ?C%windir?system32configAppEvent.Evt?Dim FilePermission As _New FileOPermission(FileIOPermissionAccess.AllAcces, eventLogDir)FilePermission.Assert()B. Replace line 6 of the code segment with the following line of code.EventLog1.WriteEntry
Suppose You aredeveloping an ASP.NET Web application that users in the accounting department will use toprocess payroll reports and view payroll reports. The application will use Integrated Windowsauthentication to authenticate all users. Because payroll data is confidential only users in theaccounting department will be granted access to the application. All employees in the accountingdepartment belong to a specific Active Directory group. However, users in the IT department canadd themselves to various Active Directory groups in order to troubleshoot resource accessproblems. These IT department users must not be granted access to the ASP.NET Webapplication. The following rules can be used to distinguish between users in the accountingdepartment and users in the IT department? All users in the accounting department are members of a group named CompanyAccounting.? Some users in the IT department are members of the CompanyAccounting group.All users in the IT department are members of a
Suppose You create an ASP.NET Web applicationthat all authenticated network users will access. The authentication mode in the Web.config file iscurrently set to None. Due to recent security threats, the network administrator requires that allconnections to the application?s Web server use the network credentials of the authenticateduser. You need to configure the application to use the network credentials of the authenticateduser as HTTPContext.Current.User. Which action or actions should you perform? (Choose all thatapply)A. Ask the network administrator to configure the IIS directory security to Anonymousauthentication.B. Ask the network administrator to configure the IIS directory security to Integrated Windowsauthentication.C. Set the authentication mode in the Web.config file to Forms.D. Set the authentication mode in the Web.config file to Windows.E. Set the impersonation attribute of the identity element in the Web.config file to true.
Suppose You are developing an application that willbe used both by company users and by contractors. Contractors will install the application ontheir own portable computers. A written company policy prohibits contractors from easilyaccessing or reviewing the source code of company applications. The file servers that contain thesource code for the application are configured so that only company software developers haveaccess. You need to ensure that the contractors cannot easily access the application sourcecode. What should you do?A. Run Dotfuctaor Community Edition on each of the application assemblies.B. Apply a strong name to each of the application assemblies.C. Run the Code Access Security Policy tool for each of the application assemblies beforedistributing the application.D. Use Encrypting File System (EFS) to encrypt the compiled application assemblies.
Suppose You develop a Windows Forms applicationthat connects to a local Microsoft SQL Server database by using the Microsoft .NET FrameworkData Provider for SQL Server. The application currently connects to the database by using anaccount that is a member of the System Administrator role in SQL Server. You need to ensurethat the application can connect to the database by using the user account of the interactive userwithout providing additional permissions. What should you do?A. Modify the application to activate a SQL Server application role.B. Modify the application to use SQL Server integrated security.C. Modify the application to send a security token that contains the authentication information in aKerberos ticket.D. Modify the application to use a COM+ security roles.
Users who are temporary employees aremembers of a group named TemporaryEmployees. You develop a serviced component namedCompanyComponent. CompanyComponent is part of a COM+ application named MyApplication.CompanyComponent is secured by using the SecurityRole attribute for the Employees role. Youneed to ensure that members of the TemporaryEmployees group are assigned to the Employeesrole. You decide to add the TemporaryEmployees group to the existing Employees role. Whichtool should you use?A. The code Access Security Policy tool.B. The Permission View tool.C. The Component Services tool.D. The Secutil tool.E. The Microsoft .NET Framework Configuration tool.
How to prevent malicious code from running, awritten company policy does not permit developers to log on by using accounts that have morepermissions than necessary.Your user account is a member of the Users group and the VS Developers group. You attempt torun an application that requires Administrator-level permissions. You receive an error messagethat states that permission is denied.You need to be able to run the application.What should you do?A. Ask the network administrator to add your user account to the domain Administrators group.B. Ask the administrator of your client computer to add your user account to the localAdministrators group.C. Add the administrator of your client computer to add your user account to the Power Usersgroup.D. Run the application by using the runas command and specify a user account in the localAdministrators group.
Suppose You are an application developer for your company. You are conducting a code review of aWindows Forms application that was developed by another developer. The applicationincludes a function named Logon(), which validates a users logon credentials. The functiondisplays a dialog box for the user to enter the users credentials, and the function validates thosecredentials by using a database.The function returns a value of 0 if the users password is incorrect, a value of 1 if the users userID is incorrect, and a value of 2 if both are correct. Users should receive access to the applicationonly if the function returns a value of 2. A function named EndApp() is used to exit the application.The application must display a message to the user, depending on the result of the Logon()function.The application contains the following code segment.int logonresult = Logon();switch(logonresult) {case 0MessageBox.Show("User name is OK, password incorrect.");break;case 1MessageBox.Show(&Suppose You create a Web Forms application to trackemployee expense report information. Information is entered by each user and stored in aMicrosoft SQL Server database. The application uses Integrated Windows authentication withimpersonation enabled to communicate with the database. All users are assigned to theDataReader role and the DataWriter role in SQL Server.The employee expense report form contains client-side validation scripts and additional servercontrols. This form is ViewState enabled. All employee expense reports must be approved by theaccounting department by using a separate form in the application before payment is made.You need to unit exam the security of the application.What should you do?A. Copy the ViewState information to a text file and attempt to decrypt it.B. Exam the application from the hosting computer and from the client computers.C. Create your own page that mimics the approved page and submit that page to the server.D. Sign on as a user in the accounting
rendc.org
Whether it is technological solutions or user-oriented innovations, We have put together for you the best sources of HR Interview Questions and Answers, Tech Ideas, and Programming Tutorials."
Get all the latest information on rendc.org
© 2022 | All rights reserved.
RENDC
welcome to www.rendc.org