You work as a Web Application Developer for SunInfo Inc. The company uses Visual Studio 2008 as
its application development platform. You create a Web application using .NET Framework 3.5. You
have written the following code in the Machine.config file:
<authorization>
<allow users=”Eric” />
</authorization>

Sam has added the following code within the <system.web> section in the Web.config file of your
application:
<authorization>
<allow users=”Sam” />
</authorization>
Which of the following statements is true about your application?

A.
Both Eric and Sam can access the application.

B.
Only Eric can access the application.

C.
None of them can access the application.

D.
Only Sam can access the application.

Explanation:
Sam overrides the Machine.config security settings by editing the Web.config file in the root of the
ASP.NET application and adding the following code in the <system.web> section:
<authorization>
<allow users=”Sam” />
</authorization>
Therefore, only Sam can access the application.
Answer B is incorrect. Sam has configured the application to provide access only to the user Sam by
overriding the Machine.config security
settings. Hence, the user Eric cannot access the application.
Answer A and C are incorrect. Only Sam can access the application.