70-300 Analyzing Requirements And Defining Microsoft .net Solution Architectures Pt.4

Front 1

When would you set ASP.NET authentication to None?

Back 1

When users do not need to be authenticated or when you are creating custom authentication logic

Front 2

In which phase of a project is the functional specification created?

Back 2

planning

Front 3

Which term refers to the process of automatically capturing information to a predetermined data store?

Back 3

logging

Front 4

What are three limitations of using IIS Integrated Windows authentication?

Back 4

1. It is not supported by all browsers(only Microsoft Internet Explorer 2.0 or later)
2. It cannot be used over HTTP Proxy connections.
3. On the firewall, additional TCP ports must be opened.

Front 5

Which two types of accounts can be used to authenticate SQL Server users?

Back 5

SQL Server Login accounts and Windows accounts

Front 6

When using ASP.NET Windows authentication, how are users authenticated?

Back 6

using their Windows domain accounts

Front 7

Why is IIS Integrated Windows authentication more secure than Basic authentication?

Back 7

because with Integrated Windows authentication, the user name and password are not sent in clear text, but rather the credentials for the current Windows user are hashed and sent

Front 8

What is an ACL?

Back 8

An Access Control List(ACL)is a list of security descriptors that apply to objects.

Front 9

Which two types of IIS authentication are enabled by default?

Back 9

Anonymous and Integrated Windows

Front 10

Are client-side cookies supported by all clients' browsers?

Back 10

No. Some browsers for small devices do not support cookies, and even with some browsers that are capable of supporting cookies, users can configure their browser to either support or not support cookies.

Front 11

Can Integrated Windows authentication be used to non-Windows computers?

Back 11

No

Front 12

Which credentials does IIS Basic authentication use to authenticate?

Back 12

the user's Windows user account

Front 13

What is the technical specification?

Back 13

a set of documents, which usually includes all of the artifacts of physical design, such as class and component specifications and network and topologies, that documents the actual implementation of a solution

Front 14

For which type of environment is IIS Integrated Windows authentication best used?

Back 14

It is best used in intranet environments where users have a Windows account and are using Internet Explorer 2.0 or later.

Front 15

What is the best option for storing small amounts of global data on the server that will not change frequently?

Back 15

This type of information is best stored as Applivation state variables.

Front 16

What protocols can IIS Integrated Windows authentication use?

Back 16

Kerberos v5 and the challenge/response protocol inherently provided

Front 17

When using Basic authentication, are logon credentials encrypted before they are transmitted?

Back 17

No. They are passed in plain text.

Front 18

To what does the term "integration" refer?

Back 18

the process of providing the ability for separate applications of systems to communicate with one another

Front 19

Which items should you include in your functional specification?

Back 19

the features of the system (what it will do and how it will do it), the security requirements of the system, and the potential risks and how you plan to mitigate them

Front 20

Can you change the account that IIS uses for Anonymous authentication?

Back 20

Yes. You can use the IIS snap-in to change the account.

Front 21

Can you use Integrated Windows authentication with all browsers?

Back 21

No. Integrated Windows authentication is only supported by Microsoft Internet Explorer version 2.0 or later.

Front 22

With SQL Server, why might you choose to have users authenticated using their Windows accounts instead of using a single SQL Server login account?

Back 22

if you need to audit on a per-user basis or specifically identify each user

Front 23

Which type of ASP.NET authentication takes advantage of a centralized authentication service provided by Microsoft?

Back 23

Passport authentication

Front 24

Which four types of authentication does ASP.NET support?

Back 24

Forms authentication, Windows authentication, Passport authentication, and None (Custom)

Front 25

What is MSMQ?

Back 25

Microsoft Message Queuing. MSMQ allows for asynchronous communication between two processes by one process posting messages to the queue and he other retrieving the messages when it is available to process them.

Front 26

Which four approaches does ASP.NET support for client-side management?

Back 26

ViewState, hidden fields, cookies, and query strings

Front 27

Which term refers to the process of logging specific events that happen within a system?

Back 27

auditing

Front 28

What are three advantages of using hidden fields to manage state on the client side?

Back 28

1. The field is stored and read from the page, so no additional server resources are needed.
2. Implementation is easy and straightforward.
3. Hidden fields are supported by almost all browsers and client devices.

Front 29

Is Forms authentication supported for XML Web services?

Back 29

No

Front 30

What are the advantages of using a SQL Server login account, instead of Windows accounts, for SQL Server users?

Back 30

The account can be used by multiple users, so connection pooling can be used and there are fewer accounts to administer.

Front 31

Which three approaches does ASP.NET support for server-side management?

Back 31

Application state, Session state, and Database

Front 32

What is the difference between Basic and Digest authentication?

Back 32

They are basically the same except that Digest authentication hashes authentication credentials and can be used across firewalls or a proxy server.

Front 33

Which four types of authentication does IIS support?

Back 33

Anonymous, Basic, Digest, and Integrated Windows (which can use Client Certificate Mapping to map client certificates to Windows accounts)

Front 34

How is a user authenticated using ASP.NET Forms authentication?

Back 34

You specify a page to which ASP.NET will redirect. This page contains the controls necessary to retrieve the user's credentials and validate them. The user's credentials are compared to those you have previously explicitly stored.

Front 35

With IIS Anonymous authentication, which user account is used by default to authenticate the user?

Back 35

IUSR_<computername>

Front 36

Which method of IIS Anonymous authentication allows all users to access the public areas of a Web site without prompting them for credentials?

Back 36

Anonymous authentication

Front 37

With IIS Anonymous authentication, how is the IUSR_<computername> account used?

Back 37

With IIS Anonymous authentication, when the request is received IIS impersonates the IUSR_<computername> account. IIS checks NTFS permissions to verify that the IUSR_<computername> account (which is by default a member of Guests) has the appropriate permissions to the requested file.

Front 38

How do functional specifications differ from technical specifications?

Back 38

The functional specification describes what will be built in terms of functionality, while the technical specification includes specifics of the physical design.