nerdexam
Microsoft

70-519 · Question #34

You need to design a solution for incorporating NTFS permissions in the Web application. Which two approaches should you recommend? (Each correct answer presents part of the solution. Choose two.)

The correct answer is A. Grant the Network Service account only Read permission to the root directory. D. Grant the Network Service account Read permission and Write permission to the Upload. Case Study 4 - VB Blue Yonder Airlines (QUESTION 35 - QUESTION 46) You are a senior developer at Blue Yonder Airlines. The company has an existing Web application that was written by using Classic ASP and COM+. It has become increasingly difficult to maintain the non- object…

Designing for Security

Question

You need to design a solution for incorporating NTFS permissions in the Web application. Which two approaches should you recommend? (Each correct answer presents part of the solution. Choose two.)

Options

  • AGrant the Network Service account only Read permission to the root directory.
  • BGrant Read permission and Write permission to the root directory
  • CGrant the Network Service account Full Control permission to the Upload folder.
  • DGrant the Network Service account Read permission and Write permission to the Upload

How the community answered

(58 responses)
  • A
    81% (47)
  • B
    12% (7)
  • C
    7% (4)

Explanation

Case Study 4 - VB Blue Yonder Airlines (QUESTION 35 - QUESTION 46) You are a senior developer at Blue Yonder Airlines. The company has an existing Web application that was written by using Classic ASP and COM+. It has become increasingly difficult to maintain the non- object oriented code. Ongoinggrowth has made the current security implementation unreliable in the defense of the attack surface. An increased user base has introduced scalability and performance problems. After several project planning sessions, the architecture team has decided that the Web application must be rewritten to increase security, allow better scalability, improve maintainability of source code, and implement best practices. BUSINESS REQUIREMENTS Your solution must meet the following business requirements. All users of the Web application must have a user name, a password, and one or more roles assigned. You must support dynamic updates to roles and permissions from within the Web Specific areas of the Web application must be secured to prevent access by unauthorized users. Due to security concerns, the use of persistent cookies is not allowed. However, the use of session cookies is allowed. The Web application must use a Microsoft SQL Server 2008 data store. In addition, the Web application must provide the capability to connect to and display third-party data. The database will store a list of news items and news categories that have the following associated requirements: - The Web application must allow users to specify a news category for entry or retrieval of news items. - When the user begins entering a news category name, the Web application must display categories matching the entered text without submitting a form. - News items that are posted in the Web application must be exposed to visitors by using RSS feeds. - The news feeds must be retrieved from the database and formatted by using the Rss20FeedFormatter class. Exception Management All exceptions within the Web application must be logged. All application exceptions must be handled at the controller level. If an exception occurs, the Web application must display a user-friendly error message. TECHNICAL REQUIREMENTS Your solution must meet the following technical requirements. Development Environment The Web application must be rewritten by using Microsoft Visual Studio 2010 and ASP.NET 4. The Web application will be deployed to a Web farm that contains three round-robin load- balanced web servers. An ASP.NET 1.1 web application currently resides within the same web You must deploy the Web application by using a single package that will copy the Web application files, modify the registry, add a new application to IIS and execute SQL scripts. After your Web application is deployed, the ASP.NET 1.1 Web application must continue to operate as Project Configuration The web application must be developed by using ASP.NET MVC 2 and the built-in webFormsviewEngine view engine. The Web application must have the capability to store debug and release configuration information separately. The Web application must connect to data sources by using object-relational mapping (ORM). The built-in classes must be used to manage users, personal preferences, and permissions. To improve code maintainability, any user-interface code that can be reused in multiple locations of the Web application must be encapsulated in a single control, plug-in, or class.

Topics

#NTFS permissions#Network Service account#least privilege#file system security

Community Discussion

No community discussion yet for this question.

Full 70-519 Practice