MCAD .NET Implementing Security for Applications with Microsoft Visual C# .NET : 70-340 Exam
Exam Number/Code: 70-340
Exam Name: MCAD .NET Implementing Security for Applications with Microsoft Visual C# .NET
“MCAD .NET Implementing Security for Applications with Microsoft Visual C# .NET”, also known as 70-340 exam, is a Microsoft certification. With the complete collection of questions and answers Q&as with Expert Explanations, Pass4sure has assembled to take you through 90 questions to your 70-340 Exam preparation. In the 70-340 exam resources, you will cover every field and category in MCAD.NET helping to ready you for your successful Microsoft Certification.
QUESTION 1:
You are an application developer for www.pass4sure.cc. You develop library assemblies that are called by your main applications. These library assemblies access
confidential data in the applications. To ensure that this data is not accessed in an unauthorized and unsafe manner, users must not be allowed to call the library assemblies from their own applications. You apply a strong name to all assemblies
to support versioning.
You need to prevent users from writing managed applications that make calls to
your library assemblies. You need to achieve this goal while minimizing the impact on response times for applications.
What should you do?
A. Use the internal access modifier to declare all classes and structures in each library.
B. Use the protected internal access modifier to declare all classes and structures in each library.
C. Add the following attribute to each class and structure in each library assembly:
D. Add the following attribute to each class and structure in each library assembly:
Answer: C Explanation:
StrongNameIdentityPermission Class
Defines the identity permission for strong names. This class cannot be inherited.
For a list of all members of this type, see StrongNameIdentityPermission Members. System.Object
System.Security.CodeAccessPermission
System.Security.Permissions.StrongNameIdentityPermission
NotInheritable Public Class StrongNameIdentityPermission
Inherits CodeAccessPermission
Remarks
Use StrongNameIdentityPermission to achieve versioning and naming protection by confirming that the calling code is in a particular strong-named code assembly.
A strong name identity is based on a cryptographic public key called a blob optionally combined with the name and version of a specific assembly. The key defines a unique namespace and provides strong verification that the name is genuine, because the definition of the name must be in an assembly signed by the corresponding private key. Note that the validity of the strong name key is not dependent on a trust relationship or any certificate necessarily being issued for the key.
Note Full demands for StrongNameIdentityPermission succeed only if all the assemblies
in the stack have the correct evidence to satisfy the demand. Link demands using
StrongNameIdentityPermissionAttribute succeed if only the immediate caller has the correct evidence.
Demands
You can use the security demand call declaratively or imperatively to specify the permissions that direct or indirect callers must have to access your library. Direct callers explicitly call static or instance methods of your library, while indirect callers call static
or instance methods of another library that calls your library. When you use a demand, any application that includes your code will execute only if all direct and indirect
callers have the permissions that the demand specifies. Demands are particularly
useful in situations in which your class library uses protected resources that you do not want to be accessed by untrusted code. Demands can be placed in code using either imperative or declarative syntax.
Note that most classes in the .NET Framework already have demands associated with them, so you do not need to make an additional demand whenever you use a class that accesses a protected resource.
Link Demands
A link demand causes a security check during just-in-time compilation and checks only the immediate caller of your code. Linking occurs when your code is bound to a type reference, including function pointer references and method calls. If the caller does not have sufficient permission to link to your code, the link is not allowed and a runtime
exception is thrown when the code is loaded and run. Link demands can be overridden in classes that inherit from your code.
Just-in-Time compilation
Languages in the .NET Framework compile to Microsoft Intermediate Language (IL)
ready for the JiT (Just-in-Time) compiler to turn them into native code when the program
is installed or first run. The runtime engine pulls in uncompiled functions for compilation on the fly as required.
The following example shows how to demand that the calling code has StrongNameIdentityPermission at link time. Code will only execute if signed with a strong name using the private key counterpart of the specified public key
_"00100538a4a19382e9429cf516dcf1399facdccca092a06442efaf9ecaca33457be26ee0"
&
_"073c6bde51fe0873666a62459581669b510ae1e84bef6bcb1aff7957237279d8b7e0e25b"
&
_"71ad39df36845b7db60382c8eb73f289823578d33c09e48d0d2f90ed4541e1438008142e"
& _"f714bfe604c41a4957a4f6e6ab36b9715ec57625904c6")> Public Class SampleClass
Restrict Unauthorized Code
By using .NET Framework code access security – specifically, code identity demands – you can limit the assemblies that can access your data access classes and methods.
For example, if you only want code written by your company or a specific development organization to be able to use your data access components, use a StrongNameIdentityPermission and demand that calling assemblies have a strong name with a specified public key, as shown in the following code fragment:
using System.Security.Permissions;
pass4sure 70-340 2.93
Questions and Answers : 90 questions
Expected Date: October 21st , 2008
Price: $129.99 $89.99
Free Down: Pass4sure Microsoft 70-340 2.93
Free Down: PassGuide microsoft 70-340 2.93
Download Latest Passforsure P4S Rapidshare links
- Free Pass4sure Microsoft 70-529 2.93 Download
- Free Pass4sure Microsoft MCDBA Dumps Download
- Free Pass4sure Microsoft MCAD 70-306 2.73 Download
- Free new PassGuide for microsoft exam Download
- Free Pass4sure Microsoft MCSE 2000 Security Download
- Free Pass4sure Microsoft MCSD 70-305 2.93 Download
- Free Pass4sure Microsoft TS 70-540(CSharp) 2. 83 Download
- Free pass4sure Microsoft MCSD 70-320 2.93 Download
- Free Pass4sure Microsoft TS 70-504(VB) 2. 83 Download
- Free Pass4sure Microsoft MCSD.NET Download
- Free Pass4sure Microsoft MCSD 70-310 2.95 Download
- Free Pass4sure microsoft MCAD C# VB EXAMS Download
- Free Pass4sure Microsoft MCAD.NET Exams Download
- Free Pass4sure Microsoft 70-542(CSharp) 2. 93 Download
- Free pass4sure Microsoft 70-330 2.93 Download


[...] mcse 70-350 v2.15 http://www.certbible.net/microsoft/70-350-2/ pass4sure mcsd 70-340 v2.18 http://www.certbible.net/microsoft/70-340/ pass4sure mcsd 70-330 v2.73 http://www.certbible.net/microsoft/70-330/ pass4sure mcdba 70-320 [...]
[...] mcse 70-350 v2.15 http://www.certbible.net/microsoft/70-350-2/ pass4sure mcsd 70-340 v2.18 http://www.certbible.net/microsoft/70-340/ pass4sure mcsd 70-330 v2.73 http://www.certbible.net/microsoft/70-330/ pass4sure mcdba 70-320 [...]
[...] Pass4sure 70-340 * MCAD .NET Implementing Security for Applications with Microsoft Visual C# .NET [...]
[...] pass4sure 70-340 PassGuide 70-340 actualtest 70-340 Pass4sure Share and Enjoy: [...]