GIAC GIAC Secure Software Programmer - C#.NET Sample Questions:

1. Holmes works as a Programmer for HiTech Institute. He develops an ASP.NET application named LibraryRecord by using Visual Studio .NET. The LibraryRecord application uses a SQL Server database named Database1. Database1 contains two tables: Students and Books. The Students table comprises three columns: StudentID, StudentName, and BookID. The Books table comprises two columns: BooksID and BooksName. Holmes creates a stored procedure that returns the records of all students who borrowed books from the institute. What will Holmes do to retrieve the records of the issued books most efficiently?

A) Use the WHERE clause in his query.
B) Use the LEFT OUTER JOIN keyword in his query.
C) Use the INNER JOIN keyword more than once in his query.
D) Use the INNER JOIN keyword in his query.

2. You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2005 as its application development platform. You are creating a .NET remoting application using .NET Framework
2.0. You want to use a remote object whose lifetime is controlled by a server and the remote object is created for each client request. Which of the following objects will you use to accomplish the task?

A) Client activated
B) MarshalByRefObject
C) Server activated Singleton
D) Server activated SingleCall

3. John works as a Web Developer for ABC Inc. He develops an ASP.NET application, named MyApp1, using Visual Studio .NET. The application will be used in the Sales department to generate monthly reports. The company uses Microsoft Windows authentication. All users are in the TESTPRO1 domain. John wants to ensure that all users except Mark, Roger, and David are allowed to access the application. Which of the following code will he use in the application's Web.config file to accomplish the task?

A) <authorization>
<allow users="TESTPRO1\Mark, TESTPRO1\Roger, TESTPRO1\David" />
<deny users="*" />
</authorization>
B) <authorization>
<allow users="*" />
<deny users="TESTPRO1\Mark, TESTPRO1\Roger, TESTPRO1\David" />
</authorization>
C) <authorization>
<deny users="TESTPRO1\Mark", "TESTPRO1\Roger", "TESTPRO1\David" />
<allow users="*" />
</authorization>
D) <authorization>
<deny users="TESTPRO1\Mark, TESTPRO1\Roger, TESTPRO1\David" />
<allow users="*" />
</authorization>

4. Allen works as a Software Developer for ABC Research Center. This research center has its subsidiaries in different cities. Allen wants to retrieve a Soil Test Report for the Geological Survey Department. He wants the test report to be available to all the members of the department over the Internet. He creates an XML Web service named SampleReport. SampleReport contains a Web method named SoilTestDetails that requires additional security. Allen decides to use generic rolebased security to secure the SoilTestDetails method from unauthorized users.
Allen writes code to ensure that once a user is authenticated, a user identity named Generic is created. The Generic user identity has a group membership named GeoSurvey to allow the authenticated users access to the SoilTestDetails Web method. Which of the following code segments should Allen use to accomplish the task?

A) Dim GeoIdentity As IIdentity = New GenericIdentity("Generic", "Custom")
Dim WinGeoIdentity As WindowsIdentity = (WindowsIdentity) GeoIdentity
Dim GeoRoles() As String = {"GeoSurvey"}
Dim GenGeoPrincipal As GenericPrincipal = New GenericPrincipal(WinGeoIdentity, GeoRoles)
WindowsIdentity.Impersonate(WinGeoIdentity.Token)
B) Dim GeoIdentity As IIdentity = New GenericIdentity("Generic", "GeoSurvey")
Dim GeoPrincipal As IPrincipal = New WindowsPrincipal((WindowsIdentity) GeoIdentity)
Thread.CurrentPrincipal = GeoPrincipal
C) Dim GenIdentity As GenericIdentity = New GenericIdentity("Generic", "Custom")
Dim GesRoles() As String= {"GeoSurvey"}
Dim GeoPrincipal As GenericPrincipal = New GenericPrincipal(GenIdentity, GeoRoles)
Thread.CurrentPrincipal = GeoPrincipal
D) Dim MyGenericIdentity As System.Security.Principal.IIdentity = New GenericIdentity("Generic",
"Custom")
Dim GeoRoles() As String = {"GeoSurvey"}
GenericPrincipal GenGeoPrincipal = new GenericPrincipal(MyGenericIdentity, GeoRoles);
MyGenericIdentity = WindowsIdentity.GetCurrent();

5. You work as a .NET Trainer for ABC Inc. The company uses Visual Studio.NET 2005 as its application development platform. You are required to identify the building blocks of .NET Framework. Which of the following building blocks will you choose to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

A) Microsoft Intermediate Language (MSIL)
B) Common Language Runtime (CLR)
C) Common Language Specification (CLS)
D) .NET Server Infrastructure
E) Common Type System (CTS)

Solutions: