GIAC GIAC Secure Software Programmer - C#.NET Sample Questions:

1. George works as a Software Developer for GenTech Inc. He creates an application named App1 using Visual Studio .NET. App1 uses the version 2.0.0.0 of an assembly named Assembly1. However, he wants App1 to use a new version i.e. 2.1.0.0 of Assembly1. Therefore, he needs to specify Assembly1's location so that App1 can use version 2.1.0.0 of Assembly1. What will George use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

A) An unmanaged code.
B) A managed code.
C) The <probing> element.
D) The <codeBase> element.

2. Allen works as a Software Developer for ABC Inc. He develops an application using Visual Studio .NET
2005. The application will be used for the registration of employees by filling a form provided in the application. The form contains the following fields:
l First Name
l Last Name
l Date of Birth
l E-mail
He provides a TextBox control for each field. He wants an employee to be able to receive a user-defined error message when he makes a wrong entry. Which of the following properties is mandatory if a
CustomValidator control is used to validate an entry?

A) ErrorMessage
B) EnableTheming
C) IsValid
D) EnableViewState

3. John works as a Web developer for HiTech Inc. He develops an application named MyApp by using Visual C# .NET. John uses a SQL Server database. He writes the following code:
OleDbCommand cmd = new OleDbCommand();
cmd.CommandText = "UPDATE Employees SET Rank = 'Senior' WHERE Basic > 10000"; cmd.ExecuteNonQuery();
Now he wants to improve the performance of the program code. Which of the following actions will he perform to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

A) Use database indexing.
B) Use a Cache object to execute the program code.
C) Use a SqlCommand object instead of an OleDbCommand object.
D) Use an OleDbDataReader object to execute the program code.
E) Use a stored procedure instead of the CommandText property.
F) Use the Prepare method on the OleDbCommand object before executing the program code.

4. Sam works as a Software Developer for BlueWell Inc. He creates a .NET Remoting object named MyObj using Visual Studio .NET. He wants to configure MyObj to send and receive confidential information from an XML file stored in an encrypted hard drive. What will he do to accomplish the task?
Each correct answer represents a part of the solution. Choose two.

A) Use the SecurityAction.RequestMinimum value for the SecurityAction flag.
B) Implement a declarative security check.
C) Use the SecurityAction.Demand value for the SecurityAction flag.
D) Implement an imperative security check.

5. You work as a Windows Application Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You are creating a Windows Forms application using .NET Framework 3.5. You need to develop a new control for the application. You must ensure that the control inherits the TreeView control by adding a custom node tag and a highlight color. What will you do?

A) Set the control's DrawMode property to OwnerDrawAll, and then implement a custom DrawNode event handler.
B) Set the control's DrawMode property to OwnerDrawText, and then implement a custom DrawNode event handler.
C) Override the OnPaint method.
D) Write a code segment in the DrawNode event handler to give the highlight color.

Solutions: