GIAC GIAC Information Security GSSP-NET-CSHARP Questions & Answers

• Question 41:

  Sam works as a Software Developer for SamTech Inc. He creates an XML Web service, named

  WebService1, using Visual Studio .NET. WebService1 uses the .NET Framework security class libraries to implement security. It implements role-based authorization based on a SQL Server database containing user names. Sam adds the following statements to the Web service codE. using System.Security.Principal; using System.Threading; Sam wants to ensure that only validated users are permitted to access WebService1 by entering their user names and passwords in TextBox controls, named Text1 and Text2. He wants to implement imperative security check on

  WebService1. He also wants to ensure that users are assigned the Manager role and the Subordinate role by default. Which of the following classes will Sam use to accomplish the task? Each correct answer represents a part of the solution. Choose two.

  A. WindowsPrincipal

  B. GenericIdentity

  C. WindowsIdentity

  D. GenericPrincipal

  Correct Answer: BD

• Question 42:

  You work as a Windows Application Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You create a Windows Forms application using .NET Framework 3.5. The application needs a

  thread that accepts an integer parameter. You write the following code segment in the application:

  Thread myThread = new Thread(new ParameterizedThreadStart(doWork));

  myThread.Start(125);

  You are required to declare the signature of the doWork method. Which of the following method signatures will you use?

  A. public void doWork(int nCount)

  B. public void doWork(Object oCount)

  C. public void doWork()

  D. public void doWork(Delegate oCount)

  Correct Answer: B

• Question 43:

  You work as an Enterprise Application Developer for ABC Inc. The company uses Visual Studio .NET as its application development platform. You create a Windows client application that communicates with a business layer component using the .NET Framework. The business layer component includes a class named MyUtility as follows:

  public class MyUtility { public MyUtility() { }

  public void ChangeData() { }

  }

  The application must fulfill the following criteriA.

  l Create instances of the MyUtility class only within the business component.

  l The application should invoke the functions within the MyUtility class.

  You evaluate the code of the MyUtility class and decide it requires modification. Which of the following modifications for the code will you recommend?

  A. Change the scope of the MyUtility class to private.

  B. Change the scope of the constructor to private.

  C. Change the scope of the constructor to internal.

  D. Change the scope of the MyUtility class to internal.

  Correct Answer: A

• Question 44:

  Georgina works as a Software Developer for BlueChip Inc. She develops an application named App1 using Visual Studio .NET. The company wants her to deploy App1 to a customer's laptop. Georgina creates an assembly named Assembly1 to be stored in the Global Assembly Cache so that the Common Language Runtime (CLR) can locate and bind Assembly1.

  As the application executes, the CLR locates the path of Assembly1 through the codebase setting. But, it finds no element in the app.config file, and fails to bind Assembly1. Now, the CLR tries to locate Assembly1 through probing. Which of the following will the CLR check to locate Assembly1?

  Each correct answer represents a part of the solution. Choose all that apply.

  A. The culture attribute of the assembly

  B. Sub-directories in the application's root directory

  C. The application base or root directory

  D. The Gacutil.exe tool in the Global Assembly Cache

  E. Previously loaded assemblies

  F. The assembly's name

  G. The correct version of the assembly

  Correct Answer: ABCF

• Question 45:

  You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET as its application development platform. You are creating a Windows service application using the .NET Framework. The service is used to execute several tasks that require background processing. You do not want to actively manage threads in the service application, but you must make sure that security checks are performed during the execution of the task. What will you do to accomplish the task?

  A. Use the ThreadPool.UnsafeQueueUserWorkItem method.

  B. thread2 raises its own priority

  C. Use the Thread.Start method.

  D. Use the Thread.Resume method.

  E. Use the ThreadPool.QueueUserWorkItem method.

  Correct Answer: E

• Question 46:

  You work as a Web Application Developer for SunInfo Inc. The company uses Visual Studio 2008 as its application development platform. You create a Web application using .NET Framework 3.5.

  You want to ensure that the data input by a user falls within a predetermined range. Which of the following validation controls will you use to accomplish the task?

  A. RangeValidator

  B. CompareValidator

  C. RequiredFieldValidator

  D. RegularExpressionValidator

  Correct Answer: A

• Question 47:

  You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET as its application development platform. You create an application using .NET Framework. You need to establish a Secure Sockets Layer (SSL) session with a remote server. The security policy of the company requires that both the client and server to provide a valid certificate for authentication before communications begins. Which of the following properties of the SslStream class will you use to accomplish this task?

  A. SslStream.IsServer

  B. SslStream.IsMutuallyAuthenticated

  C. SslStream.IsAuthenticated

  D. SslStream.IsSigned

  E. SslStream.IsEncrypted

  Correct Answer: B

• Question 48:

  You work as a Software Developer for Mansoft Inc. The company uses Visual Studio.NET 2005 as its application development platform. You need to write a code segment that can change the file extension of a file named Test.txt. Which of the following code segments will you choose to change the file extension?

  Each correct answer represents a complete solution. Choose two.

  A. using System; using System.IO; public class ChangeExample { public static void Main() { string FileName =@"C.\Test.txt"; Console.Write ("File NamE."+FileName); Console.Write (" File Extension: {0}", Path.GetExtension(FileName)); Console.Write ("Change File Extension {0}", Path.ChangeExtension(FileName, "doc")); } }

  B. using System; using System.IO; public class ChangeExample { public static void Main() { string FileName =@"C.\Test.txt"; Console.Write ("File NamE."+FileName); Console.Write (" File Extension: {0}", Path.GetExtension(FileName)); Console.Write ("Change File Extension {0}", Path.ChangeExtension(FileName,".exe")); } }

  C. using System; using System.IO; public class ChangeExample { public static void Main() { string FileName =@"C.\Test.txt"; Console.Write ("File NamE."+FileName); Console.Write (" File Extension: {0}", Path.GetExtension(FileName)); Console.Write ("Change File Extension {0}", Path.ChangeExtension(FileName)); } }

  D. using System; using System.IO; public class ChangeExample { public static void Main() { string FileName =@"C.\Test.txt"; Console.Write ("File NamE."+FileName); Console.Write (" File Extension: {0}", Path.GetExtension(FileName)); Console.Write ("Change File Extension {0}", Path.ChangeExtension("rft")); } }

  Correct Answer: AB

• Question 49:

  Allen works as a Software Developer for ABC Inc. He develops an application using Visual Studio .NET

  2005. The application will be used for the registration of employees by filling a form provided in the application. The form contains the following fields:

  l First Name

  l Last Name

  l Date of Birth

  l E-mail

  He provides a TextBox control for each field. He wants an employee to be able to receive a user- defined error message when he makes a wrong entry. Which of the following properties is mandatory if a

  CustomValidator control is used to validate an entry?

  A. EnableViewState

  B. EnableTheming

  C. ErrorMessage

  D. IsValid

  Correct Answer: D

• Question 50:

  You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2005 as its application development platform. You are developing an application that will manage rental properties for a property management agency. When a property is rented, a lease agreement is created. At that time a new lease is entered into the application, the starting date of the lease may not yet be known.

  You need to write code that stores the lease start date entered by a user in a variable. The variable that stores the lease start date should contain no value, by default. If no lease start date is entered, the variable should have no value assigned to it.

  Which code segment should you choose?

  A. DateTime? leaseStartDate = null;

  B. DateTime leaseStartDate = null;

  C. DateTime? leaseStartDate = new DateTime();

  D. DateTime leaseStartDate = new DateTime();

  Correct Answer: A