单项选择题
You are creating a Windows Communication Foundation (WCF) service that implements the following service contract.[ServiceContract]public interface IOrderProcessing { [OperationContract] void ApproveOrder(int id);}You need to ensure that only users with the Manager role can call the ApproveOrder method. What should you do?（）
A. In the method body, check the Rights PosessesProperty property to see if it contains Manager
B. Add a PrincipalPermission attribute to the method and set the Roles property to Manager
C. Add a SecurityPermission attribute to the method and set the SecurityAction to Demand
D. In the method body, create a new instance of WindowsClaimSet. Use the FindClaims method to locate a claimType named Role with a right named Manager
相关考题
-
单项选择题
A Windows Communication Foundation (WCF) client uses the following service contract.(Line numbers are included for reference only.) 01 [ServiceContract] 02 public interface IService 03 { 04 [OperationContract] 05 string Operation1(); 06 [OperationContract] 07 string Operation2(); 08 } You need to ensure that all calls to Operation1 and Operation2 from the client are encrypted and signed. What should you do?（）
A. Set the ProtectionLevel property in line 01 to EncryptAndSign.
B. Set the ProtectionLevel property in line 04 and line 06 to Sign.
C. Add a SecurityCriticalAttribute ror each operation.
D. Add a SecunitySafeCriticalAttribute for each operation. -
单项选择题
You are creating a Windows Communication Foundation (WCF) service that accepts messages from clients when they are started. The message is defined as follows:[MessageContract] public class Agent { public string CodeName { get; set; } public string SecretHandshake { get; set; }}You have the following requirements: The CodeName property must be sent in clear text. The service must be able to verify that the property value was not changed after being sent by the client. The SecretHandshake property must not be sent in clear text and must be readable by the service.What should you do?（）
A. Add a MessageBodyMember attribute to the CodeName property and set the ProtectionLevel to Sign. Add a MessageBodyMember attribute to the SecretHandshake property and set the ProtectionLevel to EncryptAndSign.
B. Add a DataProtectionPermission attribute to the each property and set the ProtectData property to true.
C. Add an xmlText attribute to the CodeName property and set the DataType property to Signed. Add a PasswordPropertyText attribute to the SecretHandshake property and set its value to true.
D. Add an ImmutableObject attribute to the CodeName property and set its value property to true. Add a Browsable attribute to the SecretHandshake property and set its value to false. -
单项选择题
You are creating a Windows Communication Foundation (WCF) service to process orders.The data contract for the order is defined as follows:[DataContract]public class Order{ [DataMember] public string CardHolderName { get; set; } [DataMember] public string CreditCardNumber { get; set; }}You have the following requirements: Enable the transmission of the contents of Order from the clients to the service. Ensure that the contents of CreditCardNumber are not sent across the network in clear text. Ensure that the contents of CreditCardNumber are accessible by the service to process the order.You need to implement the service to meet these requirements. What should you do?（）
A. Add a DataProtectionPermission attribute to the CreditCardNumber property and set the ProtectData property to true.
B. Convert the DataContract to a MessageContract and set the ProtectionLevel property to SignAndEncrypt.
C. Change the data type of CreditCardNumber from string to SecureString.
D. Implement the CreditCardNumber property getter and setter In the setter, run the value of the CreditCardNumber through the MD5CryptoServiceProvider class TransformBlock method.
