Free Microsoft 70-513 Exam Dumps Questions & Answers

You are developing a Windows Communication Foundation (WCF) service that returns location information for authorized law enforcement agencies. The service contract is as follows.

Users are authenticated and impersonated. The system uses ASP.NET roles. The members of law enforcement are members of the LawEnforcement role.
You need to ensure that only members of the LawEnforcement role can call these methods.
What are two possible ways to achieve this goal (Each correct answer presents a complete solution? Choose two.)

• A.  Add a PrincipalPermissionAttribute to each method that should be available only to members of law enforcement. Set its SecurityAction to Demand and set the role equal to LawEnforcement.
• B.  Create a GenericPrincipal specifying Thread.CurrentPrincipal.Identity as the IIdentityParameter and LawEnforcement as the only value for the Roles parameter.
• C.  Use the CurrentPrincipal property of the thread. Call the IsInRole method specifying LawEnforcement as a parameter.
• D.  At the beginning of each method, enumerate each ClaimSet in a new WindowsClaimSet. Use the FindClaims method to locate a claim type named Role with a right named LawEnforcement.

You develop a Windows Communication Foundation (WCF) service to generate reports. Client applications call the service to initiate report generation but do not wait for the reports to be generated. The service does not provide any status to the client applications.
The service class is defined as follows. (Line numbers are included for reference only.)
01 <ServiceContract()> 02 Public Class ReportGeneratorService 03 04 Private Function GenerateReports( ByVal clientID As Integer) As Integer 05 & 06 Return 0 07 End Function 08 09 End Class
You need to ensure that client applications can initiate reports without waiting for status.
Which two actions should you perform (Each correct answer presents part of the solution. Choose two.)

• A.  Insert the following code at line 03. <OperationContract(IsOneWay:=True)>
• B.  Remove line 06. At line 04, change the type of GenerateReports method to Sub. Remove the code As Integer from the method definition.
• C.  At line 04, change the GenerateReports method from Private to Public.
• D.  Insert the following code at line 03. <OperationContract(AsyncPattern:=False)>

A self-hosted Windows Communication Foundation (WCF) service uses a secure HTTP
binding with a custom principal permission mode. The binding requires users to provide their Windows logon credentials.
You need to retrieve the identity of the caller.
What are two possible properties you can use to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

• A.  Thread.CurrentPrincipal.Identity-Name
• B.  HttpContext.Current.User.Identity.Name
• C.  ServiceSecurity Context.Current.Primary Identity.Name
• D.  OperationContext.Current.ServiceSecurity Context.Primary Identity.Name

A Windows Communication Foundation (WCF) service that handles corporate accounting must be changed to comply with government regulations of auditing and accountability.
You need to configure the WCF service to execute under the Windows logged-on identity of the calling application.
What should you do?

• A.  Within the service configuration, add a serviceSecurityAudit behavior to the service, and set serviceAuthorizationAuditLevel to SuccessOrFailure.
• B.  Within the service configuration, add a serviceAuthorization behavior to the service, and set impersonateCallerForAllOperations to true.
• C.  Within the service configuration, add a serviceCredentials behavior to the service, and set type to Impersonate.
• D.  Within the service configuration, add a serviceAuthenticationManager behavior to the service, and set serviceAuthenticationManagerType to Impersonate.

You are developing a Windows Communication Foundation (WCF) service. One of the parameters used with the service operations is a security token. The security token is not sensitive. The monitoring software tracks security tokens and can read tokens in clear text only.
The company security policy requires that you validate all clear text data passed over the corporate network.
You need to ensure that the service verifies that the security token is not changed during transit.
What should you do?

• A.  Implement IEndpointldentityProvider in the message contract class.
• B.  Implement ISecureConversationSession in the message contract class.
• C.  For all the security-sensitive members, set the ProtectionLevel parameter of the MessageBodyMember or MessageHeader attribute to EncryptAndSign.
• D.  For all the security-sensitive members, set the ProtectionLevel parameter of the MessageBodyMember or MessageHeader attribute to Sign.