GIAC GIAC Secure Software Programmer - C#.NET (GSSP-NET) Free Practice Test

Question 1

Which of the following code snippets is an example of tight encapsulation?

A. int x;
public void fun(){x=5;}

B. private int x;
private void fun(){x=5;}

C. protected int x;
protected void fun(){x=5;}

D. public int x;
public void fun() {x=5;}

E. private int x;
public void fun(){x=5;}

Correct Answer: E

Question 2

Which of the following is required to be implemented by marshal-by-value objects to implement custom serialization rules?

A. SerializableAttribute

B. ISerializableAttribute

C. ISerialize

D. ISerializable

Correct Answer: D

Question 3

You work as a Software Developer for Mansoft Inc. You create an ASP.NET Web application named MyWebApp. You implement a security protocol to transmit secured data between a client and a server. You try to authenticate the client computer. However, you are unable to do so, and the AuthenticationException exception is thrown. Which of the following classes will you use to accomplish this task?
Each correct answer represents a complete solution. Choose two.

A. NegotiateStream

B. SslStream

C. AuthenticatedStream

D. Stream

Correct Answer: A,B

Question 4

You work as a software developer for ManSoft Inc. The company uses Visual Studio .NET 2005 as its application development platform. You use C#. NET to create an assembly that will be consumed by other Visual Studio .NET applications. No Permissions should be granted to this assembly unless the assembly makes a minimum permission request. You need to write a code for the assembly that makes a minimum permission request. Which of the following code segments will you use to accomplish this task?

A. [Assembly: PermissionSet(SecurityAction.RequestOptional, Unrestricted = false)]

B. [Assembly: PermissionSet(SecurityAction.RequestOptional, Unrestricted = true)]

C. [Assembly: PermissionSet(SecurityAction.PermitOnly, Unrestricted = true)]

D. [Assembly: PermissionSet(SecurityAction.PermitOnly, Unrestricted = false)]

Correct Answer: A

Question 5

Sam works as a Software Developer for GenTech Inc. He develops an application named App1 using Visual Basic .NET. App1 uses a non-COM DLL named Value1.dll, which contains unmanaged code. Sam writes a method named Method1 in Value1.dll as follows:
Method1 Lib "Value1.dll"(ByVal InputVar As String, ByRef WordsVar As String, ByRef
NumbersVar As Integer) As Integer
Sam wants to use Method1 for parsing a string into an array of string values and an array of integers. Sam wants to enable App1 to call this function. Which of the following statements about the method are true?
Each correct answer represents a complete solution. Choose all that apply.

A. The value of the first parameter cannot be changed by a procedure or a function.

B. The third parameter will contain all integer values found in the second parameter.

C. The second parameter will contain all string values found in the first parameter.

D. The third parameter will contain all string values found in the second parameter.

Correct Answer: A,B,C

Question 6

You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You have recently finished the development of an ASP.NET Web application using .NET Framework 3.5. The application must be deployed by using the http://www.ABC.com/ URL. The application has several Web forms.
You need to implement Really Simple Syndication (RSS) feeds functionality. The RSS feeds will be used by the http://www.ABC.com/Updates.rss URL. You must ensure that the application displays the RSS-formatted information when accessing the given URL. What will you do to accomplish this?
Each correct answer represents a part of the solution. Choose two.

A. Create and register a custom HttpModule class.

B. Add the HttpHandler class to the .rss extension.

C. Create and register a custom HttpHandler class that releases the RSS feeds.

D. Create an ASMX Web service component named Updates.

E. Create a Web form named Updates that releases the RSS feeds.

Correct Answer: B,C

Question 7

You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You are creating an ASP.NET Web application using .NET Framework 3.5. The application will be used to share any type of photos on Internet. All the photos should be accessible in various sizes and formats. You need to add a download feature that can be easily maintained. You also need to make sure that only a single version of all photos is stored on a SQL server database. What will you do?

A. Create an HttpHandler class to determine the request for the photo download. Process the photo according to the given format and size, and after that return the processed photo in the response.

B. Create an HttpModule class to determine the request for the photo download. Process the photo according to the given format and size, and after that return the processed photo in the response.

C. Create a user control that converts the photo to the required format and size.

D. Create an ActiveX control that converts the photo to the required format and size.

Correct Answer: A

Question 8

You work as a Software Developer for ManSoft Inc. You use Microsoft Visual Studio to create a Web service named MyWebService. You create a SOAP message that is not secure in the Web service. You want to use the ReceiveSecurityFilter class in the Web service to handle the receiving and securing of SOAP messages. Which of the following code segments will you use to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

A. public class MyReceiveSecurityFilter : ReceiveSecurityFilter { public MyReceiveSecurityFilter(string service, Boolean client) : base(service, client) { } public void ValidateMessageSecurity(SoapEnvelope envelope, Security security) { // Implementation validation here } }

B. public class MyReceiveSecurityFilter : ReceiveSecurityFilter { public MyReceiveSecurityFilter(string service, Boolean client) { base(service, client); } public override void ValidateMessageSecurity(SoapEnvelope envelope, Security security) { // Implementation validation here } }

C. public class MyReceiveSecurityFilter : ReceiveSecurityFilter { public MyReceiveSecurityFilter(string service, Boolean client) : base(service, client) { } public override void ValidateMessageSecurity(SoapEnvelope envelope, Security security) { // Implementation validation here } }

D. public class MyReceiveSecurityFilter : ReceiveSecurityFilter { public MyReceiveSecurityFilter(string service, Boolean client) { } public override void ValidateMessageSecurity(SoapEnvelope envelope, Security security) { // Implementation validation here } }

Correct Answer: B,C

Question 9

John works as a Web Developer for TechCom Inc. He creates an ASP.NET application, named MyApp1, using Visual Studio .NET. Only registered users of the company will be able to use the application. The application contains a page, named NewAccount.aspx that allows new users to register themselves to the registered user list of the company. The NewAccount page contains several TextBox controls that accept users' personal details such as username, password, confirm password, first name, last name, home address, zip code, phone number, etc. One of the TextBox controls on the page is named txtZipCode in which a user enters a Zip code.
John wants to ensure that when a user submits the NewAccount page, txtZipCode must contain five numeric digits. He wants least development effort. Which of the following validation controls will he use to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

A. RangeValidator

B. RequiredFieldValidator

C. RegularExpressionValidator

D. CompareValidator

Correct Answer: B,C

Question 10

John works as a Software Developer for Blue Well Inc. He wants to create a class named Class1 and implements the generic IComparable interface. He writes the following code:
public class Class1 : System.IComparable<Class1>
{
}
However, John needs to compare one object of Class1 with another object. Which of the following code statement will John include in his application?

A. public int CompareTo(Class1 obj){}

B. public object CompareTo(Class1 obj){}

C. public object CompareTo(int obj){}

D. public int CompareTo(object obj){}

Correct Answer: A

Question 11

Nick works as a Programmer for ES International Ltd. The company is a manufacturer and a dealer of new cars. This year, the annual sales report of the company showed that the sale of its Escort car model dropped significantly. To lower the inventory of the Escort car model, the company management finally decided to give a 25 to 30 percent discount on the Escort model. Nick receives an XML document that contains a list of the company's car models. Nick wants to load the incoming XML document into a memory stream. He also needs to use another XML document. Which of the following methods will he use to accomplish this task?
Each correct answer represents a complete solution. Choose two.

A. WriteTo()

B. LoadXml()

C. Load()

D. ImportNode()

Correct Answer: C,D

Question 12

You work as a Software Developer for ABC Inc. You develop a Windows-based application named MyApp. The application contains a form named MyForm1 that displays a submit form for registered users. You want to implement a user interface for the application. Which of the following requirements will you consider for the user interface?
Each correct answer represents a complete solution. Choose all that apply.

A. The application components are allowed to handle logging of user-entered data.

B. The user-entered data are validated through the validation checks applied in the Windows Forms controls.

C. Users are allowed to enter data in the required fields on the form.

D. The application saves the user-entered data and checks the integrity of the data.

Correct Answer: B,C

Question 13

David works as a Software Developer for McRobert Inc. He develops a Web application named App1 using Visual Studio .NET. App1 contains several Web forms that display information about an online shopping process. David wants to provide a Web-based shopping catalog to users. However, he wants to ensure that the information about the shopping catalog is secure and requires no server resources.
What will David do to accomplish the task?

A. Use a session cookie as a user preference.

B. Use a session state variable as a user preference.

C. Use an application state variable as a user preference.

D. Use a query string as a user preference.

Correct Answer: A

Question 14

You are working on an ASP.NET Web application and using .NET 2.0 as the application development platform. Authenticated users want their passwords to recover through the application. Which of the following are necessary to enable the user password recovery option for your application?
Each correct answer represents a part of the solution. Choose all that apply.

A. Using the PasswordRecovery control.

B. Sending e-mail messages to the users.

C. Using an ASP.NET membership for authentication.

D. Using the ChangedPassword control.

Correct Answer: A,B,C

Welcome to TestSimulate

GIAC GIAC Secure Software Programmer - C#.NET (GSSP-NET) Free Practice Test