nerdexam
Microsoft

70-519 · Question #23

You need to plan for authentication and authorization of Web application users. Which approach should you recommend?

The correct answer is A. Use the Membership API. Case Study 3 - VB Adventure Works (QUESTION 23 - QUESTION 34) Adventure Works is a retail operation with facilities in English-speaking and Spanish- speaking Adventure Works plans to begin selling its products online. As a first step, the company will develop a customer-facing…

Designing for Security

Question

You need to plan for authentication and authorization of Web application users. Which approach should you recommend?

Options

  • AUse the Membership API.
  • BUse the Personalization API.
  • CUse the Local Security Policy.
  • DUse the Group Policy Manager.

How the community answered

(52 responses)
  • A
    85% (44)
  • B
    8% (4)
  • C
    6% (3)
  • D
    2% (1)

Explanation

Case Study 3 - VB Adventure Works (QUESTION 23 - QUESTION 34) Adventure Works is a retail operation with facilities in English-speaking and Spanish- speaking Adventure Works plans to begin selling its products online. As a first step, the company will develop a customer-facing shopping cart. You are a senior developer hired by the company to lead the development of the new solution. BUSINESS REQUIREMENTS Your solution must meet the following business requirements. General The Web application must support the English and Spanish languages, and must display all information in the end user's language and culture. The Web application must handle errors gracefully. If an error occurs, the Web application must send a notification. The Web application must support two groups of users: customers and administrators. The Web application must have a separate interface for each user group. The customer-facing interface has the following associated requirements: - Customers must create user accounts. - The customer-facing interface must include the online store and a page that displays shopping cart content. - Customers must submit orders from the shopping cart page. - Customers must log in to user accounts to submit orders. - Customers must be able to upload image files to the Web application. The online store must include products that can be customized with the image files uploaded by The administrative interface has the following associated requirements: - The administrative interface must include tools for managing inventory, users, and sales, and tools for viewing reports. - Administrators must be able to change the appearance of the Web application for specific holidays without redeploying the application. TECHNICAL REQUIREMENTS Your solution must meet the following technical requirements. You must use only your existing hardware, which consists of three servers that run Windows The web application must be load balanced among the three servers. Development Environment The Web application must be developed by using Microsoft Visual Studio 2010 and ASP.NET 4. Debugging of server-side and client-side code must be performed by using Visual Studio 2010. A staging server will be used to validate all changes before deploying to production. All solutions must be scalable. All solutions must minimize bandwidth usage. Techniques used for implementation must result in a codebase that is easy to maintain. The application pool must be configured to run using the Network Service account. Session state must be persisted between server farm restarts. Changes that administrators make to the application's appearance must affect all images and styles across the entire application. The Web application must authenticate users by using Forms authentication. The least-privileged NTFS permission level must be applied to the file system. Server-side code and client-side code generated by developers must not be mixed. Error handling must be managed at a global level. All data must be represented as entity objects in a separate class library that wilt be available for future projects. The shopping cart content page must be developed by using a GridView control. You have the following requirements for the use of classes: - Secured pages must inherit the CustomPage class. - The CustomPage class must inherit from the Page class. - The administration pages must mhent the CustomManagementPage class. - The CustomManagementPage class must be denved from the CustomPage Certain types of files must be stored in specific folders on the web application server: - Store all pages requiring authentication in a folder named Secured. - Store all images uploaded by customers in a folder named Upload.

Topics

#Membership API#authentication#authorization#ASP.NET security

Community Discussion

No community discussion yet for this question.

Full 70-519 Practice