Microsoft UPGRADE: MCAD Skills to MCTS Web Apps Using MS.NET Framework Sample Questions:

1. You have just graduated from college, now you are serving the internship as the software developer in an international company. According to the requirements of the company CIO, you??re creating a Web application which displays data by using a GridView control. For the Web application, you drag and drop tables from the Data Connections tree in Server Explorer build Web Forms.
The following is the Add Connection dialog box. (Click the Exhibit button.) You have to use this to add a connection to your data. You have to create the data source objects, so you need to configure the .NET Data Provider that you use to achieve this.
What should you do?

A) You should click the Change button, and change the data provider for the selected data source.
B) You should click the Advanced button, and change the Application Name property to the target provider.
C) You should right-click the connection, and click Properties. Modify the Provider property of the data connection.
D) You should click the Advanced button, and change the Data Source property to the target provider.

2. You work as the developer in an IT company. Recently your company has a big customer. The customer is a hosting company. You're appointed to provide technical support for the customer. The hosting company has server which is named server1. You are deploying a Web site to server1. You can only access the server through FTP. Now according to requirement of the customer, you have to precompile and deploy the Web site without its source files. What should you do?

A) You should use the Copy Web tool.
B) You should use the Web Setup project Installer.
C) You should use the Publish Web tool.
D) You should use XCOPY.

3. You have just graduated from college, now you are serving the internship as the software developer in an international company. Now you are managing user accounts for a Web site by using the ASP.NET membership APIs. The definition for the membership provider is contained in the Web.config file. You create a PasswordReset.aspx file after modifying the Web.config file to enable password recovery. Users must reset their passwords online. And after the users have logged on through the Login.aspx page, the new passwords must be sent to them by e-mail. Besides this, before users reset their passwords, users must be required to answer their secret questions. Which code logic should you use?

A) You should modify the Login.aspx form to include a Required Field validator on the secret question answer text box. Then redirect users to the PasswordReset.aspx file.
B) You should modify the Page_Load to set the Membership.EnablePasswordReset to True in the PasswordReset.aspx file.
C) You should add a ChangePassword element to the PasswordReset.aspx file and configure it.
D) You should add a PasswordRecovery element to the PasswordReset.aspx file and configure it.

4. You work as the developer in an IT company. Recently your company has a big customer. The customer runs a large supermarket chain. You're appointed to provide technical support for the customer. Now you are creating an application. No body can run the application except members of the Administrator group are allowed to run it by using the credentials of the end user. You protect sensitive data within the application by writing the following security code.
bool isAdmin = false;
WindowsBuiltInRole role = WindowsBuiltInRole.Administrator;
...
if (!isAdmin)
throw new Exception("User not permitted");
In order to make sure that if a user who is not a member of the Administrator group runs the apllication, the application throws an exception, a code segment should be added to this security code.
In the options below, which code segment should you use?

A) WindowsIdentity currentUser = (WindowsIdentity)Thread.CurrentPrincipal.Identity;isAdmin = currentUser.Name.EndsWith("Administrator");
B) WindowsIdentity currentUser = WindowsIdentity.GetCurrent();foreach (IdentityReference grp in currentUser.Groups) { NTAccount grpAccount = ((NTAccount)grp.Translate(typeof(NTAccount))); isAdmin = grp.Value.Equals(role); if (isAdmin) break;}
C) GenericPrincipal currentUser = (GenericPrincipal) Thread.CurrentPrincipal;isAdmin = currentUser.IsInRole(role.ToString());
D) WindowsPrincipal currentUser = (WindowsPrincipal)Thread.CurrentPrincipal;isAdmin = currentUser.IsInRole(role);

5. You work as the developer in an IT company. Recently your company has a big customer. The customer runs a large supermarket chain. You're appointed to provide technical support for the customer. Now according to the customer requirement, you are creating a method to call a COM component. You have to explicitly request the runtime to perform a full stack walk by using declarative security. You must make sure that before the callers execute your method, all callers have the required level of trust for COM interop. So on the method, which attribute should you place?

A) [SecurityPermission( SecurityAction.Deny, Flags = SecurityPermissionFlag.UnmanagedCode)]
B) [SecurityPermission( SecurityAction.Demand, Flags=SecurityPermissionFlag.UnmanagedCode)]
C) [SecurityPermission( SecurityAction.Assert, Flags = SecurityPermissionFlag.UnmanagedCode)]
D) [SecurityPermission( SecurityAction.LinkDemand, Flags=SecurityPermissionFlag.UnmanagedCode)]

Solutions: