Microsoft UPGRADE: MCAD Skills to MCTS Web Apps Using MS.NET Framework : 070-559 valid dump

You work as the developer in an IT company. Recently your company has a big customer. The customer runs a large supermarket chain. You're appointed to provide technical support for the customer. Now you are creating an application. No body can run the application except members of the Administrator group are allowed to run it by using the credentials of the end user. You protect sensitive data within the application by writing the following security code.
bool isAdmin = false;
WindowsBuiltInRole role = WindowsBuiltInRole.Administrator;
...
if (!isAdmin)
throw new Exception("User not permitted");
In order to make sure that if a user who is not a member of the Administrator group runs the apllication, the application throws an exception, a code segment should be added to this security code.
In the options below, which code segment should you use?

• A. GenericPrincipal currentUser = (GenericPrincipal) Thread.CurrentPrincipal;isAdmin = currentUser.IsInRole(role.ToString());
• B. WindowsIdentity currentUser = (WindowsIdentity)Thread.CurrentPrincipal.Identity;isAdmin = currentUser.Name.EndsWith("Administrator");
• C. WindowsPrincipal currentUser = (WindowsPrincipal)Thread.CurrentPrincipal;isAdmin = currentUser.IsInRole(role);
• D. WindowsIdentity currentUser = WindowsIdentity.GetCurrent();foreach (IdentityReference grp in currentUser.Groups) { NTAccount grpAccount = ((NTAccount)grp.Translate(typeof(NTAccount))); isAdmin = grp.Value.Equals(role); if (isAdmin) break;}

You have just graduated from college, now you are serving the internship as the software developer in an international company. According to the requirements of the company CIO, you create a Web application which enables users to change fields in their personal profiles. Some of the changes are not persisting in the database. In order to be able to locate the error, you have to track each change that is made to a user profile by raising a custom event.
In the options below, which event should you use?

• A. You should use WebBaseEvent
• B. You should use WebAuditEvent
• C. You should use WebEventManager
• D. You should use WebRequestEvent

You work as the developer in an IT company. Recently your company has a big customer. The customer runs a large supermarket chain. You're appointed to provide technical support for the customer. Now according to the customer requirement, you are creating an application. Custom authentication and role-based security will be used by the application. In order to make the runtime assign an unauthenticated principal object to each running thread, you have to write a code segment. In the options below, which code segment should you use?

• A. AppDomain domain = AppDomain.CurrentDomain;domain.SetPrincipalPolicy( PrincipalPolicy.UnauthenticatedPrincipal);
• B. AppDomain domain = AppDomain.CurrentDomain; domain.SetAppDomainPolicy( PolicyLevel.CreateAppDomainLevel());
• C. AppDomain domain = AppDomain.CurrentDomain;domain.SetPrincipalPolicy(PrincipalPolicy.WindowsPrincipal);
• D. AppDomain domain = AppDomain.CurrentDomain;domain.SetThreadPrincipal(new WindowsPrincipal(null));

You work as the developer in an IT company. Recently your company has a big customer. The customer runs a large supermarket chain. You're appointed to provide technical support for the customer. Now you are managing user accounts for a Web site by using the ASP.NET membership APIs. The definition for the membership provider is contained in the Web.config file. You create a PasswordReset.aspx file after modifying the Web.config file to enable password recovery. Users must reset their passwords online. And after the users have logged on through the Login.aspx page, the new passwords must be sent to them by e-mail. Besides this, before users reset their passwords, users must be required to answer their secret questions. Which code logic should you use?

• A. You should modify the Page_Load to set the Membership.EnablePasswordReset to True in the PasswordReset.aspx file.
• B. You should modify the Login.aspx form to include a Required Field validator on the secret question answer text box. Then redirect users to the PasswordReset.aspx file.
• C. You should add a ChangePassword element to the PasswordReset.aspx file and configure it.
• D. You should add a PasswordRecovery element to the PasswordReset.aspx file and configure it.

You work as the developer in an IT company. Recently your company has a big customer. The customer runs a large supermarket chain. You're appointed to provide technical support for the customer. Now according to the customer requirement, you create a Web site. The Web site contains many predefined roles and associated users that will be used for security purposes. You have to manage these roles and user accounts. In the options below, which tool should you use?

• A. You should use the Web Site Administration Tool
• B. You should use the ASP.NET IIS Registration tool
• C. You should use the Code Access Security Policy tool
• D. You should use the Microsoft .NET Framework Configuration tool