070-523 試験問題を無料オンラインアクセス

You are designing an ASP.NET Web Forms application that uses a database containing user names and
hashed passwords for authentication. The Web application includes a login form in which users type their
user names and passwords.
You need to design a strategy to ensure that the user's login credentials cannot be stolen through a man-
in-the-middle attack.
Which approach should you recommend?

• A.Install a certificate on the Web server, and force the login form to use SSL.
• B.Write an onSubmit JavaScript handler that hashes the password before the password is submitted to the server.
• C.Write an OnClick method for the Submit button that hashes the password before the password is compared with the password value that is stored in the database.
• D.Write an onSubmit JavaScript handler that URL-encodes the password before the password is passed to the server.

You use Microsoft Visual Studio 2010 and Microsoft .NET Framework 4 to create a Windows Communication Foundation (WCF) Data Services service. You deploy the service to the following URL: http://contoso.com/Northwind.svc. You want to query the WCF Data Services service to retrieve a list of customer objects. You need to ensure that the query meets the following requirements: "Only customers that match the following filter criteria are retrieved: City="Seattle" AND Level > 200. "Data is sorted in ascending order by the ContactName and Address properties. Which URL should you use for the query?

• A.http: //contoso.com/Northwind.svc/Customers?City=Seattle & Level gt 200 & $orderby=ContactName, Address
• B.http: //contoso.com/Northwind.svc/Customers?$filter=City eq 'Seattle' and Level gt 200 & $orderby=ContactName,Address
• C.http: //contoso.com/Northwind.svc/Customers?$filter=City eq 'Seattle' and Level gt 200 & $orderby=ContactName and Address
• D.http: //contoso.com/Northwind.svc/Customers?City=Seattle & Level gt 200 & $orderby=ContactName and Address

You deploy an ASP.NET application to an IIS server.
You need to log health-monitoring events with severity level of error to the Windows application event log.
What should you do?

• A.Add the following rule to the <healthMonitoring/> section of the web.config file. <rules> <add name="Failures"
  eventName="Failure Audits"
  provider="EventLogProvider" />
  </rules>
• B.Set the Treat warnings as errors option to All in the project properties and recompile.
• C.Add the following rule to the <healthMonitoring/> section of the web.config file. <rules> <add name="Errors" eventName="All Errors" provider="EventLogProvider" /> </rules>
• D.Run the aspnet_regiis.exe command.

You use Microsoft Visual Studio 2010 and Microsoft .NET Framework 4 to create a Windows Communication Foundation (WCF) Data Services service. You discover that when an application submits a PUT or DELETE request to the Data Services service, it receives an error. You need to ensure that the application can access the service. Which header and request type should you use in the application?

• A.an X-HTTP-Method header as part of a GET request
• B.an X-HTTP-Method header as part of a POST request
• C.an HTTP ContentType header as part of a GET request
• D.an HTTP ContentType header as part of a POST request

You are creating a Windows Communication Foundation (WCF) service. You do not want to expose the internal implementation at the service layer. You need to expose the following class as a service named Arithmetic with an operation named Sum. public class Calculator {
public int Add(int x, int y)
{
}
}
Which code segment should you use?

• A.[ServiceContract(Name="Arithmetic")] public class Calculator {
  [OperationContract(ReplyAction="Sum")]
  public int Add(int x, int y)
  {
  ...
  }
  }
• B.[ServiceContract(ConfigurationName="Arithmetic")] public class Calculator {
  [OperationContract(Action="Sum")]
  public int Add(int x, int y)
  {
  ...
  }
  }
• C.[ServiceContract(Name="Arithmetic")] public class Calculator {
  [OperationContract(Name="Sum")]
  public int Add(int x, int y)
  {
  ...
  }
  }
• D.[ServiceContract(Namespace="Arithmetic")] public class Calculator {
  [OperationContract(Action="Sum")]
  public int Add(int x, int y)
  {
  ...
  }
  }