What should you do?
A message queue named SecureQueue requires each incoming message to be encrypted.
You need to ensure that a message can be sent to the SecureQueue queue without an exception being thrown.
What should you do?
What should you do?
A .NET Framework application receives messages from a private message queue named MyQueue.
The private queue exists on a computer named APPSERVER1.
A user in a domain named CONTOSO has the username dhall.
This user reports that when he attempts to run the application, he receives a MessageQueueException exception with the error message text
“Access to Message Queuing system is denied.”
You need to ensure that CONTOSO\dhall can receive messages from MyQueue using the .NET Framework application.
Your solution must not give dhall unnecessary privileges.
What should you do?
What should you do?
You are writing an application that creates network accounts for users.
The application monitors a private queue and it creates network accounts when messages arrive in that queue.
A message contains a User object.
The message is sent to the queue using the following code.
MessageQueue q = new MessageQueue(queueName);
Message m = new Message(new User(“anna”,”bedecs”));
q.Send(m, “create account”);
You need to ensure that the application can process the User object.
What should you do?
What should you do?
An application logs information about messages that pass through a message queue, including message contents.
The application must run once for each message.
You need to ensure that the application is executed for every message.
Your solution must not prevent other processes from receiving the messages on the same queue.
What should you do?
What should you do?
A Web service named Math uses Web Service Enhancements (WSE) 3.0 policy assertions that are defined in the policy configuration file to implement security.
The Web service authenticates access to the Web methods using the UsernameOverTransportAssertion policy assertion.
A client application must call a Web method on the Math Web service.
When the client application is executed, it throws an InvalidOperationException exception that displays the following text.
Unable to determine client token to use. Client token type requested was ‘Microsoft.Web.Services3.Security.Tokens.UsernameToken’.
The following code is used to invoke the Web method.
(Line numbers are included for reference only.)
01 Math ws = new Math();
02 ws.SetPolicy(“Secure”);
03 int result = ws.Add(3, 4);
You need to ensure that the Web methods can be invoked without causing the client application to throw the InvalidOperationException exception.
What should you do?
What should you do?
A Windows Forms application calls in to a Web service named SensitiveData.
The project has a Web reference named SensitiveDataWS.
The code uses a class of type SensitiveDataWS.Service. SensitiveDataWS.Service is a proxy to the Web service.
An administrator reports that users running the client application receive a SoapHeaderException exception with the following message text:
“Security requirements are not satisfied because the security header is not present in the incoming message”.
You discover that the Web Services Enhancements (WSE) 3.0 policy file for the Web service was changed to require the encryption of SOAP messages.
You acquire the X.509 certificate that is used for encryption in the Web service.
You need to ensure that the Windows Forms application meets the new security requirements of the Web service.
What should you do?
What should you do?
A client application calls a Web service named Math.
Both the client application and Math are configured with a Web Services Enhancements (WSE) 3.0 policy named Secure to validate anonymous access for certificate security.
A Web reference to the Math Web service is added to the client application’s project using Microsoft Visual Studio 2005.
When the client application is built and executed, a SoapException exception is thrown with the following message.
The security requirements are not met because the security headeris not included in the incoming message.
You need to ensure that the application runs without throwing the SoapException exception.
What should you do?
What should you do?
You are creating a Windows-based application that allows users to store photographs remotely by using a Web service.
Both the Web service and the application are configured to use Web Services Enhancements (WSE) 3.0.
You need to configure the application to ensure that a photograph can be sent to the Web service.
What should you do?
What should you do?
You have a Web service that is deployed on an unsecured network.
You need to implement encryption on the Web service.
The implementation must be configurable at run time.
What should you do?
<?xml version="1.0" ?
A Web Services Enhancements (WSE) 3.0 router application uses a referral cache to make routing decisions.
When a client application sends a SOAP message to the WSE router application, the following exception is thrown.
Microsoft.Web.Services3.Addressing.AddressingFault: MessageInformation Header RequiredThe referral cache used by the WSE router application is as follows:
<?xml version=”1.0″ ?>
<r:referrals xmlns:r=”http://schemas.xmlsoap.org/ws/2001/10/referral”>
<r:ref>
<r:for>
<r:exact> http://www.contoso.com/WSERouter/Service.asmx </r:exact>
</r:for>
<r:if />
<r:go>
<r:via> http://www.contoso.com/WSEService/Service.asmx </r:via>
</r:go>
<r:refId> uuid:fa469956-0057-4e77-962a-81c5e292f2ae </r:refId>
</r:ref>
</r:referrals>
You need to ensure that a SOAP message can be sent to the WSE router application without throwing the AddressingFault exception.
What should you do?