Which server‐side state management option should you use?

http://stackoverflow.com/questions/23666984/storing-insecure-global-info-in-azure

New 70-486 Exam Questions and Answers Updated Recently (3/May/2017):

NEW QUESTION 196
You are developing an ASP.NET MVC application to be used on the Internet. The environment does not use Active Directory. Users must be able to log on to the application to maintain their personal preferences. You need to use the least amount of development effort to enable users to log on. What should you do?

A. Enable Digest authentication.
B. Enable Windows authentication.
C. Enable Forms authentication.
D. Generate server SSL certificates and install them in IIS.

Answer: C
Explanation:
Many Web applications require a way to restrict access to some resources (such as specific pages) so that those resources are accessible only to authenticated users. The default Web application project template for ASP.NET MVC provides a controller, data models, and views that you can use to add ASP.NET forms authentication to your application. The built-in functionality lets users register, log on and off, and change their password. For many applications, this functionality provides a sufficient level of user authentication.
Incorrect:
Not B: Windows authentication would require an Active Directory. Windows authentication method works only if the following two conditions exist:
– You set up your network to use the Kerberos authentication protocol that requires Active Directory.
– You set up the computers and accounts on your network as trusted for delegation.

NEW QUESTION 197
You are developing an ASP.NET MVC application that will run in a shared environment. The application requests the user’s password, and then uses the password to sign data. You need to minimize the potential for the password to be discovered by other processes that run in the shared environment. What should you do?

A. Add the SecuritySafeCriticalAttribute attribute to the methods which process the password.
B. Store the password in a SecureString instance.
C. Encrypt the password on the web page, and decrypt the password in the MVC application.
D. Run the code that processes the password in its own AppDomain.

Answer: D
Explanation:
Application domains provide a unit of isolation for the common language runtime. They are created and run inside a process. Application domains are usually created by a runtime host, which is an application responsible for loading the runtime into a process and executing user code within an application domain. The runtime host creates a process and a default application domain, and runs managed code inside it. Runtime hosts include ASP.NET, Microsoft Internet Explorer, and the Windows shell. For most applications, you do not need to create your own application domain; the runtime host creates any necessary application domains for you. However, you can create and configure additional application domains if your application needs to isolate code or to use and unload DLLs.

NEW QUESTION 198
You are developing a controller for an ASP.NET MVC application that manages blog postings. The security protection built in to ASP.NET is preventing users from saving their HTML. You need to enable users to edit and save their HTML while maintaining existing security protection measures. Which code segment should you use?
Image URL: passleader.org/wp-content/uploads/2017/05/passleader-70-486-dumps-1981.jpg

A. Option A
B. Option B
C. Option C
D. Option D

Answer: C
Explanation:
Example:
ValidateInput at Action Method Level
The user can submit Html for this action method successfully with the following code.
public class HomeController : Controller
{
public ActionResult AddArticle()
{
return View();
}
[ValidateInput(false)]
[HttpPost]
public ActionResult AddArticle(BlogModel blog)
{
if (ModelState.IsValid)
{
}
return View();
}
}

NEW QUESTION 200
You develop an ASP.NET MVC application. The application is configured for claims-based authentication by using Windows Identity Foundation (WIF). You need to access the claims in the WIF token. Which code segment should you use?

A. Thread.CurrentPrincipal.Identity;
B. ((IClaimsPrincipal)Thread.CurrentPrincipal).Identities[0].Claims;
C. Thread.CurrentPrincipal;
D. ((IClaimsPrincipal)Thread.CurrentPrincipal).Identities[0].IsAuthenticated;

Answer: B
Explanation:
To Access the Claims
In order to access identity related information, you can run FedUtil. Once you have run FedUtil, your application can access IClaimsPrincipal and IClaimsIdentity using the standard ASP.NET constructs as shown in the following code example:
void Page_Load(object sender, EventArgs e)
{
// Cast the Thread.CurrentPrincipal
IClaimsPrincipal icp = Thread.CurrentPrincipal as IClaimsPrincipal; // Access IClaimsIdentity which contains claims
IClaimsIdentity claimsIdentity = (IClaimsIdentity)icp.Identity; // Access claims
foreach(Claim claim in claimsIdentity.Claims)
{
}
}

NEW QUESTION 201
You are developing an ASP.NET MVC application. The application has a contact view includes a form for editing the displayed contact. You need to save the Contact object model when the form is posted back to the EditContact method using a POST method request. Which code segment should you use? (Each correct answer presents a complete solution. Choose all that apply.)

A. public ActionResult EditContact(){var c = newContact(){FirstName = Request.QueryString [‘”FirstName”‘],LastName = Request.QueryString[“LastName”]},SaveContact(c);return View(c);}
B. public ActionResult EditContact(Contact c){SaveContact(c);return View(c);}
C. public ActionResult EditContact(FormCollection values){var c = newContact(){FirstName = values [‘”FirstName”‘],LastName = values[“LastName”]},SaveContact(c);return View(c);}
D. public ActionResult EditContact(QueryStringProvider values){var c = newContact(){FirstName = values.GetValue[‘”FirstName”‘],LastName = values.GetValue [“LastName”]},SaveContact(c);return View (c);}

Answer: AB

NEW QUESTION 202
You are developing an ASP.NET MVC application that enables you to edit and save a contact. The application must not save on an HTTP GET request. You need to implement the controller. Which two possible code segments should you use? Each correct answer presents a complete solution.

Image URL: passleader.org/wp-content/uploads/2017/05/passleader-70-486-dumps-2021.png
Image URL: passleader.org/wp-content/uploads/2017/05/passleader-70-486-dumps-2022.png

Answer: AB
Explanation:
A:
We retrieve the GET and POST methods through this.HttpContext.Request.RequestType.
B:
This is the default MVC implementation of having separate methods for GET and POST via function overloading.
Incorrect:
Not D: We retrieve the GET and POST methods through this.HttpContext.Request.RequestType, not through this.HttpContext.Request[“ActionName”].

NEW QUESTION 203
You are developing an ASP.NET MVC application. The application uses a set of custom exceptions to log errors that occur during the execution of an action. You need to develop a class that implements logging. Which interface should you implement?

A. IExceptionFilter
B. IActionFilter
C. IClientValidatable
D. IResultFilter

Answer: A
Explanation:
Exception filters are used to apply global policies to unhandled exceptions in the MVC app. Exception Filters implement either the IExceptionFilter or IAsyncExceptionFilter interface. Exception filters handle unhandled exceptions, including those that occur during controller creation and model binding. They are only called when an exception occurs in the pipeline.

NEW QUESTION 204
You create an ASP.NET MVC application. You host the application by using the Open Web Interface for .NET (OWIN). You run the following command by using the NuGet Package Manager console:
install-package Microsoft.AspNet.SignalR
You plan to implement real-time push notifications from the server using ASP.NET SignalR. You need to complete the ASP.NET SignalR implementation. Which three steps should you perform? Each correct answer presents part of the solution.

A. Create a hub class to push content to clients.
B. Create a class that derives from the PersistentConnection class. Use the derived class to push content to clients.
C. Use the SignalR jQuery library in a web page to send messages to the hub and display updates from the hub.
D. Map a SignalR hub to the app builder pipeline by using an OWIN startup class.
E. Start the SignalR hub asynchronously and respond to the appropriate callback methods.

Answer: ACD
Explanation:
A:
In Solution Explorer, right-click the project, select Add | New Folder, and add a new folder named Hubs. Right-click the Hubs folder, click Add | New Item, select the Visual C# | Web | SignalR node in the Installed pane, select SignalR Hub Class (v2) from the center pane, and create a new hub named ChatHub.cs. You will use this class as a SignalR server hub that sends messages to all clients.
C:
Use the SignalR jQuery library in a web page to send messages and display updates from the hub.
D:
Create an OWIN startup class to configure the application.

NEW QUESTION 205
You are developing an ASP.NET MVC application. Devices that use many different browsers will use the application. You have the following requirements:
– Content must display correctly when a device is in landscape or portrait orientation.
– Content must not scale when the device orientation changes.
– Content must be displayed by using the maximum available screen space.
– The application must render properly in Internet Explorer 8 or later versions.
You need to configure the application. Which two actions should you perform? Each correct answer presents part of the solution.

A. Use JavaScript to evaluate the window.innerWidth and window.innerHeigh properties.
B. Set the value of the width property for the viewport meta tag to device-width.
C. Use CSS to target the HTML element on each page. Set the values of the width and height properties to 100%.
D. Use CSS media queries to target screen size, device orientation, and other browser capabilities.

Answer: BD
Explanation:
B:
If you want the viewport width to match the device’s physical pixels, you can specify the following:

For this to work correctly, you must not explicitly force elements to exceed that width (e.g., using a width attribute or CSS property), otherwise the browser will be forced to use a larger viewport regardless.
D:
Media queries in CSS3 extend the CSS2 media types idea: Instead of looking for a type of device, they look at the capability of the device. Media queries can be used to check many things, such as:
– width and height of the viewport
– width and height of the device
– orientation (is the tablet/phone in landscape or portrait mode) resolution
Using media queries are a popular technique for delivering a tailored style sheet to tablets, iPhone, and Androids.

NEW QUESTION 206
……

P.S. These New 70-486 Exam Questions Were Just Updated From The Real 70-486 Exam, You Can Get The Newest 70-486 Dumps In PDF And VCE From — http://www.passleader.com/70-486.html (231q VCE and PDF)

Good Luck!