You have a website that contains a Web.config file with the following XML markup: When an unauthorized user attempts to view the website, which page will be displayed?

The correct answer is D. logon. if the request is not authorized, then the UrlAuthorizationModule aborts the lifecycle and instructs the Response object to return an HTTP 401 Unauthorized status. When using forms authentication this HTTP 401 status is never returned to the client because if the…

Understanding Web Applications

Question

You have a website that contains a Web.config file with the following XML markup:

When an unauthorized user attempts to view the website, which page will be displayed?

Options

Acontent
Bblank
Ccustom error
Dlogon

How the community answered

(57 responses)

A
5% (3)
B
4% (2)
C
11% (6)
D
81% (46)

Explanation

if the request is not authorized, then the UrlAuthorizationModule aborts the lifecycle and instructs the Response object to return an HTTP 401 Unauthorized status. When using forms authentication this HTTP 401 status is never returned to the client because if the FormsAuthenticationModule detects an HTTP 401 status is modifies it to an HTTP 302 Redirect to the login page. The following example grants access to Kim and members of the Admins role, while denying it to John and all anonymous users: <allow users="Kim"/> <allow roles="Admins"/> <deny users="John"/> <deny users="?"/> </authorization>

Topics

#Web.config#forms authentication#authorization#redirect

Community Discussion

No community discussion yet for this question.

Full 98-363 Practice