GIAC GIAC Secure Software Programmer - C#.NET Sample Questions:

1. John works as a Software Developer for InfoTech Inc. He develops an application named
SerializeObj. He creates a custom class and wants to serialize its object. He also wants the object
to be stored into an XML file named File1.xml. He writes the following code: public class
Employees
{
public string EmpID;
public string EmpName;
public decimal Salary;
}
Which of the following code statements will John add in the application?

A) XmlSerializer ObjectSerializer = new XmlSerializer();
B) XmlSerializer ObjectSerializer = new XmlSerializer(typeof(Employees));
C) XmlSerializer ObjectSerializer = new XmlSerializer(typeof(Employees), ObjectTypes);
D) XmlSerializer ObjectSerializer = new XmlSerializer(Employees);

2. Robert works as a Web Developer for MarcLync Inc. He creates a serviced component, named MyComp1. Robert wants to register MyComp1 in a library application, named MyApp1, which is to be used by clients in France and Britain. Which of the following actions will Robert take to accomplish this task?
Each correct answer represents a part of the solution. Choose two.

A) Copy the files in the GAC (Global assembly cache).
B) Ensure that MyComp1 is signed with a strong name.
C) Ensure that MyApp1 is signed with a strong name.
D) Install MyComp1 in the GAC (Global assembly cache).

3. You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET 2005 as its application development platform. You are creating an application using .NET Framework 2.0. You are using regular expression in the application to validate email, phone number, etc. You are required to match a Unicode character using hexadecimal numbers. Which of the following character escapes will you use to accomplish the task?

A) \cC
B) \u0020
C) \040
D) \x20

4. You work as a Web Application Developer for ABC Inc. The company uses Visual Studio .NET as its application development platform. You create a Web application using .NET Framework 2.0. The application is for members only. The behavior of the Web application varies according to the role of the user. The Web application uses the ASP.NET Membership control for creation of user accounts. You are required to find out whether a user is a member of a specific role. What will you do?

A) Pass the role names to the User.IsInRole method.
B) Pass the role names to the Roles.RoleExists method.
C) Pass the user names and passwords to the Membership.ValidateUser method.
D) Pass the user names to the User.IsUserInRole method.

5. You work as a Software Developer for ABC Inc. You use C# .NET to develop a windows application. The application will implement a role-based authorization scheme that is based on a Microsoft SQL Server database of user names. Users will enter their names in a text box named UserName. You must ensure that users are assigned the supervisor role and the PG role by default. Which of the following code segments will you use to accomplish this task?

A) WindowsIdentity identity =
new WindowsIdentity.GetAnonymous();
string[] RoleArray = {"Supervisor", "PG"};
WindowsPrincipal principal = new GenericPrincipal(identity, RoleArray);
B) GenericIdentity identity =
new GenericIdentity(UserName.Text);
string[] RoleArray = {"Supervisor", "PG"};
WindowsPrincipal principal = new WindowsPrincipal(identity);
C) WindowsIdentity identity =
new WindowsIdentity.GetCurrent();
string[] RoleArray ={"Supervisor", "PG"};
GenericPrincipal principal = new GenericPrincipal(identity, RoleArray);
D) GenericIdentity identity =
new GenericIdentity(UserName.Text);
string[] RoleArray = {"Supervisor", "PG"};
GenericPrincipal principal = new GenericPrincipal(identity, RoleArray);

Solutions: