GIAC GIAC Secure Software Programmer - C#.NET Sample Questions:

1. George works as a Software Developer for GenTech Inc. He creates an application named App1 using Visual Studio .NET. App1 uses the version 2.0.0.0 of an assembly named Assembly1. However, he wants App1 to use a new version i.e. 2.1.0.0 of Assembly1. Therefore, he needs to specify Assembly1's location so that App1 can use version 2.1.0.0 of Assembly1. What will George use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

A) An unmanaged code.
B) A managed code.
C) The <probing> element.
D) The <codeBase> element.

2. You work as a Software Developer for ManSoft Inc. You use Microsoft Visual Studio to create a Web service named MyWebService. You create a SOAP message that is not secure in the Web service. You want to use the SendSecurityFilter class in the Web service to handle the transmission and securing of SOAP messages. Which of the following code segments will you use to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

A) public class MySendSecurityFilter : SendSecurityFilter { public MySendSecurityFilter(string service, Boolean client) : base(service,client) { } public void SecureMessage(SoapEnvelope envelope, Security security) { // Implement validation here } }
B) public class MySendSecurityFilter : SendSecurityFilter { public MySendSecurityFilter(string service, Boolean client) { base(service,client); } public override void SecureMessage(SoapEnvelope envelope, Security security) { // Implement validation here } }
C) public class MySendSecurityFilter : SendSecurityFilter { public MySendSecurityFilter(string service, Boolean client) { } public override void SecureMessage(SoapEnvelope envelope, Security security) { // Implement validation here } }
D) public class MySendSecurityFilter : SendSecurityFilter { public MySendSecurityFilter(string service, Boolean client) : base(service,client) { } public override void SecureMessage(SoapEnvelope envelope, Security security) { // Implement validation here } }

3. You work as a Software Developer for ABC Inc. The company has several branches worldwide. The company uses Visual Studio.NET 2005 as its application development platform. You are creating an application for the branch in China. You are also implementing encoding in the application for Chinese language. Which of the following encoding types will you use to support Chinese language?
Each correct answer represents a complete solution. Choose all that apply.

A) UTF-32
B) UTF-8
C) ASCII
D) UTF-16

4. John works as a Web Developer for ProMetaworks Inc. He creates an ASP.NET application, named MyApp1, by using Visual Studio .NET. MyApp1 contains a page, named Page1. Page1 contains several TextBox controls that accept users' input. John uses several validation controls on the page to validate input controls. He wants to display all the validation error messages on the page in a message box. However, he does not want the validation summary to be displayed inline on the Web page. What will he do to accomplish the task?

A) Add a ValidationSummary control to the page. Set its ShowMessageBox property to True and ValidationSummary property to False.
B) Add a ValidationSummary control to the page. Set its ShowMessageBox and ValidationSummary properties to True.
C) Add a CustomValidator control to the page. Write a custom client-side script function. Set the ClientValidationFunction property of the control to the name of the function.
D) Add a ValidationSummary control to the page. Set its DisplayMode property to MessageBox .

5. John works as a Web Developer for ABC Inc. He develops an ASP.NET application, named MyApp1, using Visual Studio .NET. MyApp1 uses a Microsoft SQL Server 2000 database, named Database1. Database1 contains a table, named Orders, that stores the order details. In Database1, he creates a stored procedure, named Proc1, as follows:
CREATE PROCEDURE [Proc1] AS
Return (Select Count(*) from Orders)
The Proc1 stored procedure returns a count of the number of rows in the Orders table. MyApp1
includes a page, named Page1.aspx. In the Page1_Load event handler, John writes the following
code to call the stored procedure:
string Str1;
SqlConnection Con;
SqlCommand Cmd1;
Str1 = "Server=TestPro1;Database=Database1;uid=sa;pwd=;";
Con = new SqlConnection(Str1);
Cmd1 = new SqlCommand("Proc1", Con);
Cmd1.CommandType = CommandType.StoredProcedure;
John wants to create an instance of the SqlParameter class that represents the return value from
the Proc1 stored procedure. Which of the following code will he use to accomplish the task?

A) SqlParameter Parm1;
Parm1 = Cmd1.Parameters.Add("@NoOfOrders", SqlDbType.Int);
Parm1.Direction = ParameterDirection.ReturnValue;
B) SqlParameter Parm1;
Parm1 = Cmd1.Parameters.Add("@NoOfOrders", SqlDbType.Int);
Parm1.Direction = ParameterDirection.InputOutput;
C) SqlParameter Parm1;
Parm1 = Cmd1.Parameters.Add("@NoOfOrders", SqlDbType.Int);
Parm1.Direction = ParameterDirection.Output;
D) SqlParameter Parm1;
Parm1 = Cmd1.Parameters.Add("@NoOfOrders", SqlDbType.Int);

Solutions: