MB6-704 · Question #43
You need to identify how the Application Object Server (AOS) implements Code Access Security to prevent securedAPIs from being invoked by un trusted code. Which three verifications are performed by…
The correct answer is C. That the assert is executed in trusted code and saved in the Application Object Tree (AOT) D. That the assert is executed on the same tier as the secured class E. That the assert modifies the client only invocations of the secured class. Call a CAS-enabled API 1. Declare a variable for the relevant permission class. 2. Create a new instance of the class. 3. Request permission by using the assert method on the permission class. 4. Revert the assertion (to limit the scope of the permission) after the CAS-enabled…
Question
You need to identify how the Application Object Server (AOS) implements Code Access Security to prevent securedAPIs from being invoked by un trusted code. Which three verifications are performed by the AOS? Each correct answer presents part of the solution.
Options
- AThat the assert is executed on the multiple tiers from the secured class
- BThat the code asserts the appropriate permission on the call stack to use the secured class
- CThat the assert is executed in trusted code and saved in the Application Object Tree (AOT)
- DThat the assert is executed on the same tier as the secured class
- EThat the assert modifies the client only invocations of the secured class
How the community answered
(65 responses)- A15% (10)
- B8% (5)
- C77% (50)
Explanation
Call a CAS-enabled API 1. Declare a variable for the relevant permission class. 2. Create a new instance of the class. 3. Request permission by using the assert method on the permission class. 4. Revert the assertion (to limit the scope of the permission) after the CAS-enabled API has been used; optional. Permission is automatically reverted when the method finishes executing.
Topics
Community Discussion
No community discussion yet for this question.