GIAC GIAC Secure Software Programmer - C#.NET Sample Questions:

1. You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2008 as its application development platform. You create an ASP.NET Web application using the .NET Framework 3.5. The application is used to map HTTP requests to HTTP handlers based on a file name extension. You need to ensure that each HTTP handler processes individual HTTP URLs or groups of URL extensions in the application.
Which of the following built-in HTTP handlers will you use to accomplish this task?
Each correct answer represents a part of the solution. Choose all that apply.

A) ASP.NET page handler (*.aspx)
B) Generic handler (*.ashx)
C) Web service handler (*.asmx)
D) Trace handler (trace.axd)
E) Generic Web handler (*.ashx)

2. You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2005 as its application development platform. You create a Windows service application that will be used by Visual Studio .NET applications. You want to ensure that an access to the Windows service is restricted. Therefore, you decide to use the ServiceInstaller class. You want to specify the security context of the Windows service application. Whic

A) Account property
B) Password property
C) UserName property
D) Context property

3. Smith works as a Software Developer for ABC Inc. He creates an application using Visual
Studio .NET 2005. The application displays "Welcome to ABC" on the top-left corner of a form. He writes the following code:
StringBuilder strbuild1 = new StringBuilder(20);
strbuild1.Append("'Welcome");
strbuild1.Append(" ");
strbuild1.Append("to");
strbuild1.Append(" ");
strbuild1.Append("ABC'");
string str1 = strbuild1.ToString();
Console.WriteLine(str1);
Console.ReadLine();
What is the main purpose of using StringBuilder object in the application?

A) To append a specified string to the end of the StringBuilder object.
B) To create dynamic or mutable strings.
C) To convert a value of the StringBuilder object to the String object.
D) To concatenate two or more different set of strings or a set of Unicode characters.

4. Sandra works as a Software Developer for ABC Inc. She develops a Web site on a client computer. She creates a custom control named CustControl1 on a Web page named
MicrosoftCert1. She wants to retain the custom control property information during several round trips to a server. She wants to ensure that the control property is retained even if the view state of the Web page is disabled at the page level. Which of the following client-based techniques for storing state management information will Sandra use to accomplish the task?

A) Hidden field
B) Query string
C) Control state
D) View state
E) Cookie

5. You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2005 as its application development platform. You create a remoting application that provides stock information to customers using .NET Framework. The server component raises an event on the client computer when certain conditions are met. You must ensure that the server raises exactly one event for each client application that is registered for the event. What will you do to accomplish this task?

A) Configure the server class as a Client Activated Object (CAO) and override the CreateObjRef method to check for duplicate client delegate methods before raising the event.
B) Configure the server class as a Singleton Activated Object (SAO) and check for duplicate client delegate methods before raising the event.
C) Configure the server class as a SingleCall Activated Object (SAO) and check for duplicate client delegate methods before raising the event.
D) Configure the server class as a Client Activated Object (CAO) and check for duplicate client delegate methods before raising the event.

Solutions: