GIAC GIAC Secure Software Programmer - C#.NET - GSSP-NET

Maria works as a Software Developer for ManSoft Inc. She develops an application using Visual Studio .NET 2005. Maria wants to ensure that only employees of the Accounts department can view the application. Therefore, she decides to change the configuration settings in the Web.config file.
What will Maria do to accomplish the task?

• A. Add the <authorization> element in the Machine.config file. Then add the <allow roles="Accounts" /> attribute in the element.
• B. Add the <authorization> element in the Web.config file.
• C. Add the <authorization> element in the Web.config file. Then add the <allow users="Accounts" /> attribute in the element.
• D. Add the <authentication> element in the Web.config file.

You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You create an ASP.NET Web application using .NET Framework 3.5. You are not using an exception handling framework in the application. However, the application must automatically log all unhandled exceptions to an event log. You are required to configure the Web.config file accordingly. Which of the following configurations will you use to accomplish the task?

• A. <customErrors mode="On"/>
• B. <healthMonitoring enabled="true"/>
• C. <deployment retail="true"/>
• D. <trace enabled="true"/>

You work as a Windows Application Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You have recently finished development of a Windows Forms application using .NET Framework 3.5. You have written complex foreach loops to retrieve data from collections. However, you want to modify the application, so that it uses LINQ queries in place of foreach loops. What will be the advantages of using LINQ queries instead of foreach loops?
Each correct answer represents a part of the solution. Choose all that apply.

• A. They provide powerful filtering, ordering, and grouping capabilities with least application co de.
• B. They provide lambda expression in the form of an expression tree.
• C. They are more concise and readable, particularly when filtering multiple conditions.
• D. They can be ported to other data sources with slight or no alteration.

Smith works as a Software Developer for BlueWell Inc. He develops a Web application named WebApp by using Visual Studio .NET. He wants to deploy WebApp on a target computer. He wants to take precautionary measures in the application so that no issues may arise while deploying it. Which of the following measures will Smith take to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

• A. Organize data in the application configuration files.
• B. Use a tracing feature to trace and gather information about each step in the program execu tion.
• C. Use a technique to avoid errors and to store error-related information.
• D. Respond to health monitoring events in order to log performance and error-related conditio ns.
• E. Use a debugger to step through the application code while it is running.

You work as a Software Developer for ManSoft Inc. You use Microsoft Visual Studio to create a Web service named MyWebService. You create a SOAP message that is not secure in the Web service. You want to use the SoapFilter class in the Web service to filter the SOAP message. Which of the following code segments will you use to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

• A. public class MySoapFilter : SoapFilter
  {
  string soapmsg="This is the soap message I want to filter";
  public override SoapFilterResult ProcessMessage(SoapEnvelope envelope)
  {
  this.Trace();
  return SoapFilterResult.Continue;
  }
  }
• B. public class MySoapFilter : SoapFilter
  {
  string soapmsg="This is the soap message I want to filter";
  public override SoapFilterResult ProcessMessage(SoapEnvelope envelope)
  {
  this.Trace(soapmsg);
  return SoapFilterResult.Continue;
  }
  }
• C. public class MySoapFilter : SoapFilter
  {
  string soapmsg="This is the soap message I want to filter";
  public MySoapFilter()
  { }
  public override SoapFilterResult ProcessMessage(SoapEnvelope envelope)
  {
  this.Trace(soapmsg);
  return SoapFilterResult.Continue;
  }
  }
• D. public class MySoapFilter : SoapFilter
  {
  string soapmsg="This is the soap message I want to filter";
  public MySoapFilter()
  { }
  public override SoapFilterResult ProcessMessage(SoapEnvelope envelope)
  {
  this.Trace(soapmsg);
  return SoapFilterResult;
  }
  }