Microsoft TS: Web Applications Development with Microsoft .NET Framework 4 Sample Questions:

1. You are perfoming security testing on an existing asp.net web page.
You notice that you are able to issue unauthorised postback requests to the page.
You need to prevent unauthorised post back requests. which page directive you use?

A) <%@Page EnableEventValidation = "true" %>
B) <%@Page Aspcompact = "true" %>
C) <%@Page enableViewStateMac = "true" %>
D) <%@Page strict = "true" %>

2. You are developing an ASP.NET web application that you will deploy to an Internet Information Services
(IIS) 7.0 server.
The application will run in Integrated pipeline mode. The application contains a phot gallery of images that
are stored in a Microsoft SQL Server database.
You need to ensure that the application can retrieve images from the database without blocking IIS worker
process threads.
What should you do?

A) Create an asynchronous HttpHandler that is registered in the <httpHandlers> section in the web.config file.
B) Create a synchronous HttpHandler that is registered in the <httpHandlers> section in the web.config file.
C) Create a custom HttpModule that is registered in the <httpModules> section in the web.config file.
D) Create an asynchronous HttpHandler that is registered in the <handlers> section under system.webServer in the web.config file.

3. You are developing a Asp.net MVC 2 application
The following Customer class is rendered by the Html.DisplayForModel helper method.
public class Customer
{
public string FirstName { get; set;}
public string LastName { get; set;}
public string EmailAddress { get; set;}
}
You create a partial view named Email.ascx in the Views/Shared/DisplayTemplates folder. Email.ascx
performs custom formatting of e-mail addresses.
You need to ensure that the custom formatting is applied to only the EmailAddress property.
What should you do?

A) Rename Email.ascx to EmailAddress.ascx
B) Add the following attribute to the EmailAddress property. [DataType(DataType.EmailAddress)]
C) Add the following attribute tot the EmailAddress property [UIHint("Email")]
D) Rename Email.ascx to String.ascx.

4. You create an ASP.NET page.
The page uses the jQuery $.ajax function to make calls back to the server in several places.
You add the following div element to the page.
<div id="errorInfo"> </div>
You need to implement a single error handler that will add error information from all page $.ajax calls to the
div named errorInfo.
What should you do?

A) Add the following option to each $.ajax function call:
error: function (XMLHttpRequest, textStatus, errorThrown) { $("#errorInfo").text("<li>Error information is: " + textStatus + "</li>"); }
B) Add the following code to the $(document).ready function on the page:
$.ajaxError(function(event, request, settings){
$(this).append("<li>Error requesting page " + settings.url + "</li>");});
Add the following option to each $.ajax function call:
global: true
C) Add the following options to each $.ajax function call:
global: true,
error: function (XMLHttpRequest, textStatus, errorThrown)
{ $("#errorInfo").text("<li>Error information is: " + textStatus + "</li>");
D) Add the following code to the $(document).ready function on the page:
$("#errorInfo").ajaxError(function(event, request, settings){ $(this).append ("<li>Error requesting page " + settings.url + "</li>"); });

5. You are implementing an ASP.NET MVC 2 Web application that allows users to view and edit data.
You need to ensure that only logged-in users can access the Edit action of the controller.
What are two possible attributes that you can add to the Edit action to achieve this goal? (Each correct
answer presents a complete solution. Choose two.)

A) [Authorize(Users = "*")]
B) [Authorize(Users = "")]
C) [Authorize(Roles = "*")]
D) [Authorize(Roles = "")]

Solutions: