You are designing an ASP.NET Web application.
You are implementing the ASP.NET membership and profile providers to do the following:
– Support retrieval of user passwords within the ASP.NET Web application.
– Access profile data that is stored in two or moreMicrosoft SQL Server tables.
You need to ensure that the Web application is properly configured to interact with the providers.
Which approach should you recommend?

You need to design a solution for the protection ofthe pages in the Secured folder.
Which approach should you recommend?

You need to ensure that unauthorized users do not have access to the administration pages.
Which approach should you recommend?

You are designing an ASP.NET MVC 2 Web application for a customers extranet site.
You need to allow only requests that originate fromthe customers intranet IP address range to access the
application, and you must redirect other access requests to the customer s Web site.
Which approach should you recommend?

You are designing a user input form that is part ofan ASP.NET Web Forms application.
You need to ensure that users cannot attack the Webserver by submitting invalid data.
Which approach should you recommend?

You are designing an ASP.NET Web Forms application that uses a database containing user names and
hashed passwords for authentication.
The Web application includes a login form in which users type their user names and passwords.
You need to design a strategy to ensure that the users login credentials cannot be stolen through a man-in-themiddle attack. Which approach should you recommend?

You are designing a testing methodology for an ASP.NET MVC 2 Web application. You have the following
application testing requirements:
– Verify that security issues are identified as early within the request as possible.
– Verify that the effectiveness of input corruptionis minimized.
You need to meet the application testing requirements.
Which methodology should you recommend?

You are designing a testing methodology for an ASP.NET MVC 2 Web application.
The application has a rich domain model that represents the logic and the data of the business.
A faade over the domain model provides a simplifiedAPI that is used by the controllers.
A data access layer beneath the domain model is used by the domain model to handle data storage and
retrieval. You have the following requirements:
– Centralize business rules.
– Directly validate the accuracy of the business rules.
You need to design tests against the appropriate layer to meet the requirements.
Which layer should you recommend?

You need to design a solution for capturing an exception.
Which approach should you recommend?

You need to design an exception-handling strategy for the Web application.
Which approach should you recommend?