Free Microsoft 070-486 Exam Dumps Questions & Answers

You are developing an ASP.NET MVC application.
You need to authenticate clients by using an ASP.NET membership database.
Which authentication method should you implement?

• A.  Kerberos
• B.  Basic
• C.  Windows
• D.  Forms

You plan to deploy an ASP.NET Core MVC web application to an internal server cluster that runs Kestrel on Linux. The server cluster hosts many other web applications. All applications are behind an Nginx load balancer.
You need to ensure that the application meets the following requirements:
* Secure against man-in-the-middle attacks.
* Allow Open ID Connect authentication.
* Cache responses using HTTP caching.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.  Bind Kestrel to port 0.
• B.  Configure ASP.NET Core to use forwarded headers.
• C.  Terminate Secure Sockets Layer (SSL) in Kestrel.
• D.  Enable the proxy_cache_bypass module.

You are developing an ASP.NET Core MVC web application that uses custom security middleware. The middleware will add a response header to stop pages form loading when reflected cross-site scripting (XSS) attacks are detected.
The security middleware component must be constructed once per application lifetime.
You need to implement the middleware.
How should you complete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: return _next(httpContext);
Example:
public Task Invoke(HttpContext httpContext)
{
httpContext.Response.Headers.Add("X-Xss-Protection", "1");
httpContext.Response.Headers.Add("X-Frame-Options", "SAMEORIGIN");
httpContext.Response.Headers.Add("X-Content-Type-Options", "nosniff");
return _next(httpContext);
}
Box 2: UseSecurityMiddleware
Box 3: UseMiddleware<SecurityMiddleware>()
Example:
public static class SecurityMiddlewareExtensions
{
public static IApplicationBuilder UseSecurityMiddleware(this IApplicationBuilder builder)
{
return builder.UseMiddleware<SecurityMiddleware>();
}
}
Box 4: UseSecurityMiddleware
The Extensions part is optional, but it does allow you to write code like this :
public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
{
app.UseMiddleware<SecurityMiddleware>(); //If I didn't have the extension method app.UseSecurityMiddleware(); //Nifty encapsulation with the extension
}

You are building an ASP.NET web application.
You must test the web application in multiple browsers at the same time.
You need to ensure that the application can use the Browser Link feature.
Which two actions should you perform? Each correct answer presents part of the solution.

• A.  Use an external editor for webpages.
• B.  Enable source control server support.
• C.  In the web.config file, set the value of the debug attribute to False.
• D.  Enable Browser link.
• E.  In the web.config file, set the value of the debug attribute to True.

You are developing an ASP.NET Core MVC web application.
You write a Gulp task to automatically minify and upload JavaScript CSS, and image files to Microsoft Azure CDN.
You need to ensure that the minification and upload tasks run automatically after every build in Microsoft Visual Studio Professional.
Which tool should you use?

• A.  Azure Publish Dialog's Connected Services section
• B.  Task Runner Explorer After Build binding
  References: https://blogs.msdn.microsoft.com/webdev/2016/01/06/task-runners-in-visual-studio-2015/
• C.  Visual Studio Build Continuous Delivery tool
• D.  Visual Studio Batch Build dialog
• E.  Bower Package manager