70-486 Exam
Ultimate Guide: mvc certification 70 486 dumps pdf
Exam Code: 70 486 certification (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Developing ASP.NET MVC 4 Web Applications
Certification Provider: Microsoft
Free Today! Guaranteed Training- Pass microsoft exam 70 486 Exam.
Q1. - (Topic 4)
You are developing an ASP.NET MVC application that supports multiple cultures and multiple languages. The application will be sold to international customers.
The ASP.NET MVC application must store localized content in satellite assemblies for multiple languages.
You need to generate the satellite assemblies during an automated build.
Which tool should you use?
A. Gacutil.exe
B. Al.exe
C. Ildasm.exe
D. nasm.exe
Answer: B
Explanation: Use the Assembly Linker (Al.exe) to compile .resources files into satellite assemblies. Al.exe creates an assembly from the .resources files that you specify. By definition, satellite assemblies can only contain resources. They cannot contain any executable code.
The following Al.exe command creates a satellite assembly for the application MyApp from the file strings.de.resources.
al /t:lib /embed:strings.de.resources /culture:de /out:MyApp.resources.dll
Q2. - (Topic 4)
You are developing an ASP.NET MVC application that will be deployed on a web farm.
Passwords must be stored in the web.config file and must not be readable or in a format
that is easily decodable
You need to encrypt the passwords that are stored in the web.config file.
Which command-line tool should you use?
A. Aspnet_regiis.exe
B. Ngen.exe
C. Aspnet_merge.exe
D. EdmGen.exe
Answer: A
Explanation: http://msdn.microsoft.com/en-us/library/zhhddkxy(v=vs.100).aspx
Q3. DRAG DROP - (Topic 1)
You need to implement security according to the business requirements.
You have the following code:
Which code segments should you include in Target 1, Target 2, Target 3 and Target 4 to modify RunLogController? To answer, drag the appropriate code segment to the correct targets. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q4. HOTSPOT - (Topic 1)
You need to implement the map of the runners' paths.
How should you build the video viewer? (To answer, select the appropriate options in the answer area.)
Answer:
Q5. DRAG DROP - (Topic 4)
You are developing an ASP.NET MVC application. The application has a view that displays a list of orders in a multi-select list box.
You need to enable users to select multiple orders and submit them for processing.
What should you do? (To answer, drag the appropriate words to the correct targets. Each word may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)
Answer:
Q6. HOTSPOT - (Topic 4)
You are developing an ASP.NET MVC web application that enables users to open Microsoft Excel files.
The current implementation of the ExcelResult class is as follows.
You need to enable users to open Excel files.
How should you implement the ExecuteResult method? (To answer, select the appropriate options in the answer area.)
Answer:
Q7. - (Topic 4)
You are designing a distributed application that runs on the Microsoft Azure platform.
The application must store a small amount of insecure global information for all users that
does not change frequently.
You need to configure the application to meet the requirements.
Which server-side state management option should you use? Each correct answer presents a complete solution. Choose all that apply.
A. profile properties of the Microsoft Azure application
B. Microsoft Azure session state
C. SQL Database
D. Microsoft Azure application state
Answer: A
Explanation: In many applications, you want to store and use information that is unique to a user. When a user visits your site, you can use the information you have stored to present the user with a personalized version of your Web application. Personalizing an application requires a number of elements: you must store the information using a unique user identifier, be able to recognize users when they visit again, and then fetch the user information as needed. To simplify your applications, you can use the ASP.NET profile feature, which can perform all of these tasks for you.
Q8. - (Topic 4)
You are developing an ASP.NET MVC application that uses forms authentication. The
application uses SQL queries that display customer order data.
Logs show there have been several malicious attacks against the servers.
You need to prevent all SQL injection attacks from malicious users against the application.
How should you secure the queries?
A. Check the input against patterns seen in the logs and other records.
B. Escape single quotes and apostrophes on all string-based input parameters.
C. Implement parameterization of all input strings.
D. Filter out prohibited words in the input submitted by the users.
Answer: C
Explanation: SQL Injection Prevention, Defense Option 1: Prepared Statements (Parameterized Queries) The use of prepared statements (aka parameterized queries) is how all developers should first be taught how to write database queries. They are simple to write, and easier to understand than dynamic queries. Parameterized queries force the developer to first define all the SQL code, and then pass in each parameter to the query later. This coding style allows the database to distinguish between code and data, regardless of what user input is supplied.
Prepared statements ensure that an attacker is not able to change the intent of a query, even if SQL commands are inserted by an attacker.
Reference: SQL Injection Prevention Cheat Sheet
Q9. - (Topic 2)
You updated the web.config file with the HTTP run-time value required to display an alternative version of the site.
You need to ensure that the correct page displays to the users.
Which code segment should you use to update the controller?
A. If (Request.IsTabletDevice)
B. If (Request.Browser.IsBrowser("Mobile"))
C. If (Request.UserAgent["Tablet"])
D. If (Request.Browser.IsMobileDevice)
Answer: D
Q10. HOTSPOT - (Topic 4)
You develop an ASP.NET MVC application. The application includes a feature that allows users to reset their passwords. The feature is enabled by a ForgotPassword controller method and a corresponding Razor view.
You need to prevent Cross-Site Request Forgery (CSRF) attacks.
How should you complete the relevant code? To answer, select the appropriate code segment from each list in the answer area.
Answer: