GIAC GIAC Information Security GSSP-NET Questions & Answers

• Question 1:

  You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You are creating an ASP.NET Web application using .NET Framework 3.5. You need to implement a system to monitor Service Level Agreement (SLA) compliance in the application. You are required to make a method to enable precise calculation of the time taken by all requests to process. What will you do to accomplish this?

  A. Implement a Timer component in the application. Calculate the elapsed time between the Start and Stop methods.

  B. Implement a base Web form for all the Web forms in the application. Calculate the elapsed time between the Load and Unload events.

  C. Create and register a custom HttpHandler.

  D. Create and register a custom HttpModule.

  Correct Answer: D

• Question 2:

  You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You create an ASP.NET Web application using .NET Framework 3.5. You create a Web form in the application that permits users to provide personal information. You add a DropDownList control to the Web form to retrieve the residential status of users. The default item that the DropDownList control displays is the "Select Country" option. You have to ensure that users select a country other than the default option. Which of the following validation controls should you use to accomplish this task?

  A. RangeValidator

  B. RequiredFieldValidator

  C. CustomValidator

  D. RegularExpressionValidator

  Correct Answer: B

• Question 3:

  You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2005 as its application development platform. You create an application for the company. You need to validate the phone number passed to a class as a parameter in the application. Which of the following is the most effective way to verify that the format of the data matches a phone number?

  A. Regular expressions

  B. Nested If statements

  C. Use the String.Length property

  D. A try/catch block

  Correct Answer: A

• Question 4:

  You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2005 as its application development platform. You create a message queue named SecureQ using .NET Framework. The message queue requires each incoming message to be encrypted. You want to ensure that a message can be sent to SecureQ without an exception being thrown. What will you do to accomplish this task?

  A. Use the CryptoStream class to encrypt the Body property on the message.

  B. Set the HashAlgorithm property to a value from the HashAlgorithm enumeration on the me ssage.

  C. Set the EncryptionAlgorithm property to a value from the EncryptionAlgorithm enumeration on the message.

  D. Set the UseEncryption property to true on the message.

  Correct Answer: D

• Question 5:

  Peter works as a Software Developer for PaulTech Inc. He develops an application for office management, using Visual C# .NET. He creates an OleDbConnection object, named Pcon. He wants to create an OleDbCommand object to retrieve employee details. Which of the following statements will Peter use to set the CommandText and Connection properties to accomplish the required task?

  Each correct answer represents a part of the solution. Choose three.

  A. OleDbCommand PCommand = new OleDbCommand("sp_GetDetails", PCon);

  B. PCommand.CommandType = "SELECT * FROM Employees";

  C. PCommand.Connection = Pcon;

  D. PCommand.CommandText = "SELECT * FROM Employees";

  E. PCommand.SetConnection (PCon);

  F. OleDbCommand PCommand = new OleDbCommand();

  Correct Answer: CDF

• Question 6:

  You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2005 as its application development platform. You are creating a .NET remoting application using .NET Framework 2.0.

  The object of the application will be shared by multiple applications. You want to use simple, modular, extensible, and XML-based protocol to exchange messages between remoting applications. What will you do to accomplish the task?

  A. Use the BinaryFormatter class.

  B. Use client activated objects.

  C. Use the SoapFormatter class.

  D. Use the SOAP protocol.

  Correct Answer: C

• Question 7:

  George works as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2005 as its application development platform. George creates an application using the .NET Framework. He writes the following code snippet in the application:

  public class FirstClass { public static int test=500;

  } public class SecondClass : FirstClass { public static void Main(String[] args) { SecondClass mb=new SecondClass(); mb.MyMethod();

  } public void MyMethod() { //Appropriate statement } } George wants to modify the value of the test variable in MyMethod to 1000. Which of the following code segments will he place in MyMethod to accomplish this task? Each correct answer represents a complete solution. Choose all that apply.

  A. base.test=1000;

  B. test=1000;

  C. FirstClass.test=1000;

  D. test=1000.00;

  Correct Answer: BC

• Question 8:

  You work as a Software Developer for Mansoft Inc. You create an application and use it to create users as members of the local Users group. Which of the following code snippets imperatively demands that the current user is a member of the local Users group?

  Each correct answer represents a complete solution. Choose all that apply.

  A. System.AppDomain.CurrentDomain.SetPrincipalPolicy(PrincipalPolicy.WindowsPrincipal); PrincipalPermission MyPermission = new PrincipalPermission(null, @"BUILTIN\Users", true); MyPermission.Demand();

  B. PrincipalPermission MyPermission = new PrincipalPermission(null, @"BUILTIN\Users", true); MyPermission.Demand();

  C. System.AppDomain.CurrentDomain.SetPrincipalPolicy(PrincipalPolicy.WindowsPrincipal); PrincipalPermission MyPermission = new PrincipalPermission(null, @"Users", true); MyPermission.Demand();

  D. PrincipalPermission MyPermission = new PrincipalPermission(null, @"Users", true); MyPermission.Demand();

  Correct Answer: AC

• Question 9:

  Charles works as a Web Developer for TechNet Inc. He develops an application named AdAgentsApp for advertising agents by using Visual Studio .NET. AdAgentsApp uses several Web services provided by the company. The employees in the IT department use only the existing port numbers 80 (HTTP protocol) and 443 (HTTPS protocol) for firewall security. However, they are forbidden to open any other new ports. These ports have been used to ensure the highest security level of authentication.

  Which of the following actions should Charles take to maintain the highest security?

  Each correct answer represents a part of the solution. Choose two.

  A. Use Windows Basic Authentication with SSL.

  B. Use Windows Digest Authentication.

  C. Use Custom Authentication.

  D. Send the encrypted information in SOAP headers.

  E. Use Windows Authentication with Client Certificates.

  Correct Answer: CD

• Question 10:

  You work as a Web Application Developer for SunInfo Inc. The company uses Visual Studio 2008 as its application development platform. You create a Web application using .NET Framework 3.5.

  You want to attach the Visual Studio Debugger to Internet Explorer when the application is running. Which of the following steps will you take to accomplish the task?

  Each correct answer represents a part of the solution. Choose all that apply.

  A. In Visual Studio, go to the Debug menu and select Start Debugging.

  B. In Visual Studio, go to the Debug menu, click Windows, and then click Script Explorer.

  C. In the Attach to Process dialog box, select the instance of Internet Explorer (iexplorer.exe) to be attached to the debugger.

  D. In Visual Studio, go to the Debug menu and click Attach to Process.

  Correct Answer: CD