You are developing an ASP.NET MVC application that uses forms authentication. The application
uses SQL queries that display customer order data.
You need to prevent all SQL injection attacks against the application.
How should you secure the queries?

You are developing a new ASP.NET MVC application that will be hosted on Microsoft Azure. You
need to implement caching.
The caching solution must support the following:
The cache must be able to store out‐of‐process ASP.NET session state.
The cache must be able to store a variety of data types.
The cache must offer a large amount of space for cached content.
You must be able to share output cache content across web server instances.
You need to select a cache solution.
Which caching solution should you choose?

DRAG DROP
You are developing an ASP.NET MVC application in a web farm. The application has a page that
accepts a customer’s order, processes it, and then redirects the browser to a page where the order
is displayed along with the shipping information.
The order information should be available only to the page where the order is displayed.
You need to store state and configure the application.
What should you do? To answer, drag the appropriate item to the correct location. Each item may
be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.

DRAG DROP
You are developing an ASP.NET MVC application that authenticates a user by using claims‐based
authentication.
The application must:
Use Windows Identity Foundation 4.5.
Support the Windows Azure Access Control Service.
You need to implement authentication.
You have the following code:

Which code segments should you include in Target 1, Target 2, Target 3 and Target 4 to build the
class constructor? To answer, drag the appropriate code segment to the correct targets in the
answer area. Each code segment may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.

DRAG DROP
You are developing an ASP.NET MVC application in Visual Studio. The application contains sensitive
bank account data.
The application contains a helper class named SensitiveData.Helpers.CustomEncryptor.

The application contains a controller named BankAccountController with two actions.

The application contains a model named BankAccount, which is defined in the following code
segment.

The application must not display AccountNumber in clear text in any URL.
You need to build the view for the GetAccounts action.
You have the following code:

Which code segments should you include in Target 1, Target 2 and Target 3 to build the view? To
answer, drag the appropriate code segment to the correct targets. Each code segment may be used
once, more than once, or not at all. You may need to drag the split bar between panes or scroll to
view content.

You are designing a distributed application that runs on the Microsoft Azure platform.
The application must store a small amount of insecure global information for all users that does not
change frequently.
You need to configure the application to meet the requirements.
Which server‐side state management option should you use? Each correct answer presents a
complete solution. Choose all that apply.

HOTSPOT
You develop a new ASP.NET MVC web application. The application is hosted in an Azure Web Role. It
includes the following code. Line numbers are included for reference only.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.