GIAC GSSP-NET : GIAC GIAC Secure Software Programmer - C#.NET

You work as a Software Developer for ManSoft Inc. You create an assembly. You place the assembly in a specific folder. Which of the following classes can you use to determine whether the assembly was located in a specific folder?
Each correct answer represents a complete solution. Choose two.

• A. ApplicationDirectoryMembershipCondition
• B. SiteMembershipCondition
• C. GacMembershipCondition
• D. UrlMembershipCondition

You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET as its application development platform. You create a method to hash data with the Secure Hash Algorithm (SHA) using .NET Framework. The hash data is passed to the method as a byte array named msg. You are required to calculate the hash of the msg array by using the SHA1. It is also mandatory to place the result into a byte array named Myhash. Which of the following code segments should you use to accomplish the task?

• A. SHA1 Mysha1 = new SHA1CryptoServiceProvider();
  byte[] Myhash = BitConverter.GetBytes(Mysha1.GetHashCode());
• B. SHA1 Mysha1 = new SHA1CryptoServiceProvider();
  Mysha1.GetHashCode();
  byte[] Myhash = Mysha1.Hash;
• C. SHA1 Mysha1 = new SHA1CryptoServiceProvider();
  byte[] Myhash = Mysha1.ComputeHash(msg);
• D. SHA1 Mysha1 = new SHA1CryptoServiceProvider();
  byte[] Myhash = null;
  Mysha1.TransformBlock(msg, 0, msg.Length, Myhash, 0);

David works as a Software Developer for GenTech Inc. He creates an XML Web service, named MyWebService, using Visual Studio .NET. MyWebService uses Microsoft Windows authentication. Users of MyWebService are in the GenTech domain. David wants to configure MyWebService to use the following URL-based authorization rules:
l Anonymous users must not be allowed to access MyWebService.
l All the users except User1 and User2 must be allowed to access MyWebService.
David configures Internet Information Services (IIS) to meet these requirements. Which of the following code will David use to configure the authorization section of the Web.config file for MyWebService?

• A. <authorization>
  <deny users="GenTechUser1, GenTechUser2">
  <allow users="*">
  </authorization>
• B. <authorization>
  <deny users="GenTechUser1, GenTechUser2">
  <deny users="?">
  <allow users="*">
  </authorization>
• C. <authorization>
  <allow users="*">
  <deny users="GenTechUser1, GenTechUser2">
  <deny users="?">
  </authorization>
• D. <authorization>
  <allow users="*">
  <deny users="GenTechUser1, GenTechUser2">
  </authorization>
• E. <authorization> <deny users="GenTechUser1, GenTechUser2"> <allow users=''*''> <deny users="?"> </authorization>

You work as an Enterprise Application Developer for ABC Inc. The company uses Visual Studio 2008 as its application development platform. You create a web application using .NET Framework 3.5. You have created a form named Form1. You have added Textbox controls for taking Name, Address, and Phone Number of user as input in Form1. You want to ensure that a user enters a value in the Name field. Which of the following validation server controls will you use to accomplish the task?

• A. CustomValidator
• B. CompareValidator
• C. RequiredFieldValidator
• D. RangeValidator

You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You are creating an ASP.NET Web application using .NET Framework 3.5. The application will be accessed by Internet users. You need to enable users to authenticate from the client-side script. You add the following code fragment in the Web.config file of the application:
<system.web.extensions>
<scripting>
<webServices>
<authenticationService enabled="true" />
</webServices>
</scripting>
</system.web.extensions>
You must configure the application to ensure that user credentials are validated against Active Directory by using the client-side script. What will you do to accomplish this?
Each correct answer represents a part of the solution. Choose two.

• A. Add the following code fragment to the Web.config file of the application: <authentication mode="Passport" />
• B. Configure the application to use the ActiveDirectoryMembershipProvider class.
• C. Configure the application to use the SqlMembershipProvider class.
• D. Add the following code fragment to the Web.config file of the application: <authentication mode="Windows" />
• E. Add the following code fragment to the Web.config file of the application: <authentication mode="Forms" />