You are designing a distributed banking application that handles multiple customers. A user may log
on to the site to perform activities such as checking balances, performing transactions, and other
activities that must be done securely.
The application must store secure information that is specific to an individual user. The data must be
automatically and securely purged when the user logs off.
You need to save transient information in a secure data store.
Which data store should you use?
A.
NET session state
B.
NET profile properties
C.
NET application state
D.
Shared database
I found the answer confusing with another answer from question 47 – 70-486(1) which is like this:
“You are discussing state management options that allows the storing of data on the server. You are currently dealing with the option that allows you to store user-specific data.
Which of the following is the option being discussed?”
A. Query Strings.
B. Application State.
C. Profile Properties.
D. Session State.
E. View State.
Answer: C (Profile Properties.)
In this link https://msdn.microsoft.com/en-us/library/2y3fs9xs.aspx
says that profile properties are persistent, but our question specify that the information must be removed when user logoff.
If someone have other explanation please correct me.
A: Session state has a lot of options, eg. a state server could work.
B: not good
“Profile properties require a certain amount of maintenance. Because profile data is persisted to non-volatile storage, you must make sure that your application calls the appropriate cleanup mechanisms”
So the data is not automatically and securely purged when the user logs off.
C: not good
Application state is not specific to an individual user.
D: far from good for the task, eg. not data is not automatically and securely purged when the user logs off.
Reference:
https://msdn.microsoft.com/en-us/library/z1hkazw7(v=vs.100).aspx
https://msdn.microsoft.com/en-us/library/ms178586(v=vs.100).aspx
In 47 – 70-486(1) asking about storing data, but not how long. All answers, except C, have limited time of storing.
In current question we need to store only during a user session.
A is correct – http://stackoverflow.com/questions/31177370/mvc-store-secure-information