070-547 Designing and Developing Web-Based　　　　　　　

70-547

PRO: Designing and Developing Web-Based

Applications by Using the Microsoft .NET Framework

QUESTION 1 You work as the application developer at Abc .com. The Abc .com network consists of a single Active Directory domain named Abc .com. All servers in the domain run Windows Server 2003. Your responsibilities at Abc .com include the deployment of applications. Abc .com operates as on online auctioneer. You have just deployed a Web site for Abc .com. This Web site will be used by customers to place and monitor their bids online. The application makes use of business components to update and retrieve bid information from a SQL Server database. You need to monitor this application and track any errors that may be caused by customer activity on the Web site. To this end you decide to create a custom TraceSwitch object named CustomerSwitch to toggle the tracing level as required.

Following are the tracing requirements that should be met:

1. All errors should be traced.

2. Application-specific warning messages should NOT be traced.

3. Application-specific informational messages should NOT be traced.

You then test the application and found that no messages are being traced. You need to remedy the situation. What should you do?

A. The CustomerSwitch value should be changed to 1.

B. The CustomerSwitch value should be changed to 1.Then restart the Web application.

C. The CustomerSwitch value should be changed to 4.

D. The CustomerSwitch value should be changed to 4.Then recompile the Web application.

Answer: A

Explanation:

There are several available trace levels to which a custom TraceSwitch like CustomerSwitch can be set. These are: Off – numerical value of 0; Error – numerical value of 1; Warning – numerical value of 2; Info – numerical value of 3 and verbose -numerical of 4. Each of lese level builds on the other, so that the Warning setting for instance will include both errors and warnings, and the Info level setting will include errors, warnings, and informational messages, etc. in this case you only need to trace errors. Thus you should change the CustomerSwitch setting to 1.

Incorrect answers:

B: Restarting the Web application should not be done because once the Web.config file is saved, the new application settings will apply.

C: Setting the value to 4 would also trace unnecessary information.

D: You should not recompile the Web application because once the Web.config file is saved, the new application settings will apply.

QUESTION 2

You work as the application developer at Abc .com. The Abc .com network consists of a single Active Directory domain named Abc .com. All servers in the domain run Windows Server 2003. Abc .com operates an as on-line marketing organization that makes use of Web-based applications. To carry out your duties of support and deployment of applications, you need the ability to quickly locate bugs in the existing Abc .com applications that were deployed across Abc .com. You must ensure that all errors and warnings are traced. You need to make sure that no unnecessary information is tracked, and thus decided to configure a TraceSwitch object. This TraceSwitch object will be used in many Web applications. Now you only need to decide on which configuration setting to set the TraceSwitch object. What should you do?

A. The TraceSwitch tracing level should be set to Info.

B. The TraceSwitch tracing level should be set to Error.

C. The TraceSwitch tracing level should be set to Verbose.

D. The TraceSwitch tracing level should be set to Warning.

Answer: D

Explanation:

The Warning tracing level will display both error messages and warning messages and would thus be the setting required in this scenario.

Incorrect answers:

A: The Info tracing level will display not only error messages and warning messages, but also informational messages which you do not want to trace.

B: The Error tracing level only displays error messages and not the warnings.

C: The Verbose tracing level will also display all unnecessary information that you do not want to trace.

QUESTION 3

You work as the Enterprise application developer at Abc .com. The Abc .com network consists of a single Active Directory domain named Abc .com. All servers in the domain run Windows Server 2003. There is only one Web server at Abc .com. The design of applications forms part of your responsibilities at Abc .com. Abc .com operates as a manufacturing company. You are currently developing Web-based applications for Abc .com. All the departments at Abc .com will have its own Web application for custom content and functionality that is department-specific. All these Web applications make use of third party .NET 1.1 components. These components are all shared by other Web applications within Abc .com. You must meet the following requirements in your development of these Web-based applications:

1. The Web-based applications must require the shared components.

2. The Web-based applications must also require ASP.NET 2.0 features.

You should develop these applications with the least amount of developer effort and time. To this end you need to take a decision on how you will meet these requirements in your solution. What should you do?

A. You should upgrade the shared components to .NET 2.0

B. You should enable directory browsing on the Web Server to access the shared components.

C. You should place the shared components in the same directory as the main Web application.

D. Since ASP.NET 2.0 Web applications are compatible with .NET 1.1 components you should not do anything.

Answer: D

Explanation:

The ASP.NET 2.0 and ASP.NET 1.1 runtime can run on the same machine without any additional configuration settings required. The ASP.Net 1.1 components can benefit from the performance options that are available in ASP.NET 2.0 and ASP.NET 2.0 applications can continue to communicate with the ASP.NET 1.1 components. Thus there is no need to do anything.

Incorrect answers:

A: There is no need to upgrade the shared components to ASP.NET 2.0. This option would not be available if the components are third party and data access components should then be redesigned to take full advantage of the ASP.NET 2.0 benefits. In fact it would be simpler upgrading an ASP.NET 1.1 site to ASP.NET 2.0.

B: You should not enable directory browsing on the Web server because it can allow any user to see the directory structure of your Web site. And furthermore, directory browsing will not allow different versions of ASP.NET to run.

C: The shared components should not be placed in the same directory as the main Web application. Merging the files into the same directory will create a problem with other Web applications accessing the shared component.

QUESTION 4

You work as the Enterprise application developer at Abc .com. The Abc .com network consists of a single Active Directory domain named Abc .com. All servers in the domain run Windows Server 2003. The design of applications forms part of your responsibilities at Abc .com. Abc .com operates as an online-retailer. You are currently developing a Web-based application for Abc .com. This application will server as an order fulfillment application. Upon completion this application will allow the Abc .com users to enter a zip code into a TextBox control where they will be able to find al the packages that have been shipped to a particular geographical area. The application will take the TextBox value and construct a query similar to the one illustrated in the Exhibit below:

Exhibit:

SELECT * FROM Orders WHERE zip = ’21006′;

You now need to make sure that you mitigate the possibility of malicious code being inserted into the query strings

passed to the SQL Server for parsing and execution. What should you do?

A. You should use a RequiredFieldValidator control on the TextBox.

B. You should validate user input using stored procedures.

C. You should build Transact-SQL statements directly from the TextBox input.

D. You should concatenate user input from the TextBox.

Answer: B

Explanation:

It is possible that malicious code can be inserted into user input variables that are concatenated with SQL statements and executed, i.e. the SQL injection attack. To prevent this from happening you should configure the Web-based application to validate all input prior to sending the request to the database by making use of least privilege accounts when accessing the database, and using stored procedures rather than dynamically constructed SQL when possible.

Incorrect answers:

A: You should not make use of the RequiredFieldValidator control on the TextBox. This will force the users to enter a value for the zip code, but would not prevent malicious code from being accepted as input.

C: You should not build the Transact-SQL statement directly from the TextBox input as it provides a user with an opportunity to insert malicious code. And executing the Transact-SQL statements directly from the TextBox input has to potential to harm your database.

D: You should not concatenate user input from the TextBox. The input from the TextBox control should rather be validated prior to concatenation as invalidated concatenation input makes an application susceptible to SQL injection attacks.

QUESTION 5

You work as the Enterprise application developer at Abc .com. The Abc .com network consists of a single Active Directory domain named Abc .com. All servers in the domain run Windows Server 2003. The design of applications forms part of your responsibilities at Abc .com. Abc .com operates as a company that provides financial, investment and accounting services to its customers. You are currently developing a Web-based application for Abc .com. This application will be used to maintain the investment account information for the Abc .com customers. This investment account information is sent as Extensible Markup Language (XML) documents from the Microsoft SQL Server 2005 database. Each XML document should contain customer feedback information. You want this application to allow you to contact the customers regarding the given feedback. Following are the requirements that should be met:

1. The Web-based application must retrieve each customer’s contact details such as name, address, and e-mail address from the XML document.

2. You must be allowed to determine which geographical area has the most customer complaints.

3. The customer data should remain in XML format.

4. You must maximize performance of the query.

You thus need to make a decision as to which approach you can use to query the SQL Server data to meet theserequirements. What should you do?

B. Query the SQL Server data using a SELECT statement that calls the DataType.Xml method.

C. Query the SQL Server data using a SELECT statement with an OPENXML function.

D. Query the SQL Server data using a SELECT statement with the OPENROWSET function.

Answer: C

Explanation:

The OPENXML function can be used to query data from an XML document. It is also possible to convert the XML data, store it is a temporary table, then query the data, but this schlep will be eliminated using the OPENXML function and also you should not change the data from XML because the Web site data must remain in XML format. Thus the database should be queried with the SELECT statement with an OPENXML function.

Incorrect answers:

A: The FOR XML clause is used to format the results of a query in XML format. In this case you need to query the data from an XML document. Thus this option is not required.

B: The DataType.Xml method returns an object that represents a specified data type, and will thus not allow you to query the XML document directly.

D: The OPENROWSET function is used for querying remote data sources and this is not what is required in this scenario.

QUESTION 6

You work as an ASP.NET developer at Abc .com. Abc .com uses the Microsoft Visual Studio .NET 2005 as their application development platform. You use a Microsoft Windows XP Professional client computer named Abc -WS547 as your development computer. Internet Information Services (IIS) is installed on Abc -WS547. You are developing a Web-based client application for the Abc .com Web site. The Abc .com Web site sells subscriptions to courseware material. The Web application must allow users to browse subscription options, to purchase subscriptions, to add subscriptions to a wish list, to store bank account details, and to review products online. You must implement a standardized layout according to the company’s branding on each page. The pages must also implement a daily advertisement above the main menu. The advertisement must be replaced every morning. You want to reduce the effort required to maintain the Web application. What should you do?

A. Add an AdRotator control to each Web page and place the daily advertisement in the Advertisement file.

B. Include the daily advertisement in a Master Page and set the masterPageFile attribute in the Web.config file.

C. Create a User Control for the daily advertisement and add the User Control to each Web page.

D. Include the daily advertisement in a Template Page and bind each Web page to the Template Page.

Answer: B

Explanation:

Master Pages allows you to create a common layout for across all pages that the Master Page is bound to. You can either bind the Master Page to each page in the Page directive on each page, or in the masterPageFile attribute of the Web.config file. If the master PageFile attribute of the Web.config file is set to the location of the Master Page, any changes made to the Master Page will be propagated to each Web page. This will reduce the effort required to maintain the daily advertisement.

Incorrect answers:

A: The AdRotator control is used to rotate between various advertisements contained in an AdvertisementFile. Advertisements are displayed on the basis on page impressions. It is possible to have only one advertisement in the AdvertisementFile and to change the advertisement every morning but this is not the purpose of the AdRotator control.

C: You could include the advertisement in a User control but you would need a Master Page to standardize the layout of each page. It would therefore require less effort to add the advertisement to the Master Page.

D: ASP.NET does not support a Template Page.

QUESTION 7

You work as an ASP.NET developer at Abc .com. Abc .com uses the Microsoft Visual Studio .NET 2005 as their application development platform. You use a Microsoft Windows XP Professional client computer named Abc -WS547 as your development computer. Internet Information Services (IIS) is installed on Abc -WS547. You are developing a Web-based client application for the Abc .com Web site. The Abc .com Web site sells subscriptions to courseware material. The Web application must allow users to browse subscription options, to purchase subscriptions, to add subscriptions to a wish list, to store bank account details, and to review products online. You must implement a standardized layout on each page. You must also ensure that all controls maintain a consistent appearance according to the company’s branding. What should you do?

70-241 TS: Developing Business Process and Integration Solutions by Using Microsoft BizTalk Server 2006 R2　　　　　　　

Question: 1 You work in an international company which is named TXTWIN. And you’re in charge ofthe company network and use Microsoft BizTalk Server 2006 R2. You develop three schemas all of which have a property named AccountID. They’re respectively named Account, AccountOrder, and AccountAnswer. Now you create an orchestration which performs the following steps in sequence, the orchestration contains one Send shape, two Receive shapes, and several other shapes. First, the orchestration receives an incoming document, and the document matches the Account schema, second it maps the incoming document to the AccountOrder schema, and then it sends the AccountOrder message to the MessageBox database, receives messages that match the AccountAnswer schema back from the MessageBox database. At last if the AccountAnswer message indicates any errors, it logs a message to the event log. You develop a correlation set named CorrelationAccountID and a correlation type. Both of them re on the basis of the AccountID property. Now you have been assigned a task that you must ensure that multiple instances of the orchestration can run simultaneously, besides this, you must make sure that each one can process a unique account ID. In order to assure this, what actions should you do? (choose more than one)

A. On the Send shape, you should initialize CorrelationAccountID.

Answer: B

70-293BIG5 MCSE 2003 Security Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure　　　　　　　

QUESTION 1You are the network administrator for Abc . The network consists of a single Active Directory domain named Abc .com. The network contains 10 domain controllers and 50 servers in application server roles. All servers run Windows Server 2003. The application servers are configured with custom security settings that are specific to their roles as application servers. Application servers are required to audit account logon events, object access events, and system events.Application servers are required to have passwords that meet complexity requirements, to enforce password history, and to enforce password aging. Application servers must also be protected against man-in-the-middle attacks during authentication. You need to deploy and refresh the custom securitysettings on a routine basis. You also need to be able to verify the custom securitysettings during audits. What should you do?

QUESTION 2

You are the network administrator for Abc . The company has a main office andtwo branch offices. The network in the main office contains 10 servers and 100client computers. Each branch office contains 5 servers and 50 client computers.Each branch office is connected to the main office by a direct T1 line. Thenetwork design requires that company IP addresses must be assigned from a single classful private IP address range. The network is assigned a class C private IP address range to allocate IP addresses for servers and client computers. Abc acquires a company named Acme. The acquisition will increase the number of servers to 20 and the number of client computers to 200 in the main office. Theacquisition is expected to increase the number of servers to 20 and the number of client computers to 200 in the branch offices. The acquisition will also add 10 more branch offices. After the acquisition, all branch offices will be the same size.Each branch office will be connected to the main office by a direct T1 line. The new company will follow the Abc network design requirements. You need to plan the IP addressing for the new company. You need to comply with the network design requirement. What should you do?

QUESTION 3

You are a network administrator for Abc . The internal network has an ActiveDirectory-integrated zone for the Abc .org domain. Computers on the internal network use the Active Directory-integrated DNS service for all host nameresolution. The Abc Web site and DNS server are hosted at a local ISP. Thepublic Web site for Abc is accessed at www. Abc .com. The DNS server at the ISP hosts the Abc .com domain. To improve support for the Web site, Abc wants to move the Web site and DNS service from the ISP to the company’s perimeter network. The DNS server on the perimeter network must contain only the host (A) resource records for computers on the perimeter network. You install aWindows Server 2003 computer on the perimeter network to host the DNSservice for the Abc .com domain. You need to ensure that the computers on theinternal network can properly resolve host names for all internal resources, allperimeter resources, and all Internet resources. Which two actions should you take? (Each correct answer presents part of the solution. Choose two)

A. On the DNS server that is on the perimeter network, install a primary zone

for Abc .com.

B. On the DNS server that is on the perimeter network, install a stub zone for

Abc .com.

C. Configure the DNS server that is on the internal network to conditionally

forward lookup requests to the DNS server that is on the perimeter network.

D. Configure the computers on the internal network to use one of the internal

DNS servers as the preferred DNS server.

Configure the TCP/IP settings on the computers on the internal network to

use the DNS server on the perimeter network as an alternate DNS server.

E. On the DNS server that is on the perimeter network, configure a root zone.

Answer: A, C

Explanation:

By configuring a primary zone for Abc .com on a DNS server in the perimeter network,

we have a DNS server that can resolve requests for the www. Abc .com website. To

enable users on the LAN to quickly resolve Abc .com resources, we can configure

conditional forwarding on the internal Abc .org server so that requests for Abc .com

resources get forwarded straight to the perimeter network DNS server.

Incorrect Answers:

B: A stub zone is no good to us here. The perimeter DNS server must be authoritative for

the Abc .com domain. Therefore, we need a primary zone on the perimeter DNS server.

D: As long as the internal DNS servers are working, the external DNS server will never

be used. Internal clients will not be able to resolve www. Abc .com.

E: There is no need to configure a root zone on the perimeter network DNS server.

QUESTION 4

You are a network administrator for Abc . The network consists of a singleActive Directory domain named Abc .com. All domain controllers and memberservers run Windows Server 2003, Enterprise Edition. All client computers runWindows XP Professional. Abc has one main office and one branch office. Thetwo offices are connected to a T1 WAN connection. There is a hardware router ateach end of the connection. The main office contains 10,000 client computers, andthe branch office contains 5,000 client computers. You need to use DHCP to provide IP addresses to the Windows XP Professional computers in both offices. You need to minimize network configuration traffic on the WAN connection.Your solution needs to prevent any component involved in the DHCP architecture from becoming a single point of failure. What should you do?

A. At the main office, configure two Windows Server 2003 computers as a

DHCP server cluster.

Configure the branch office router as a DHCP relay agent.

B. At the main office, configure two Windows Server 2003 computers as a

DHCP server cluster.

At the branch office, configure a Windows Server 2003 computer as a DHCP

relay agent.

C. At the main office, configure two Windows Server 2003 computers as a

DHCP server cluster.

At the branch office, configure two Windows Server 2003 computers as a

DHCP server cluster.

D. At the main office, configure two Windows Server 2003 computers as DHCP

servers.

Configure one DHCP server to handle 80 percent of the IP address scope and the other DHCP server to handle 20 percent.

70-226 MCSE Designing Highly Available Web Solutions with Microsoft Windows 2000 Server Technologies　　　　　　　

70-226

Designing Highly Available Web Solutions 2K Server Tech.

QUESTION NO: 1You need to redesign the Web services environment to meet the availability and disasterrecovery requirements. Which four changes should you make to the web servers? Eachcorrect answer presents part of the solution. (Choose four)

A. Place all of the existing Web servers on the same subnet in the main data center.

Configure all the existing Web servers in a single NLB cluster.

B. Place one new Web server on each of the subnets in the main data center on which the

existing Web servers are located. Configure all the Web servers in a single NLB cluster.

C. Place two new standby Web servers in a branch campus data center. Configure the two

new standby Web servers in a new NLB cluster

D. Place two new standby Web servers in a branch campus data center. Add the two new

standby Web servers to the NLB cluster that contains the Web servers in the main data

center.

E. Create custom Internet Information Services (IIS) error pages.

F. Create a process to modify the DNS host record for the Web site to redirect requests to

the standby Web site on the event of a disaster. Ser the Time to Live (TTL) for DNS

entries at less then one hour.

G. Create round-robin DNS entries for the main Web site that resolve to both the main data

center and the standby Web servers at a branch campus data center. Set the Time to Live

(TTL) for DNS entries at less then one hour

Answer: A, C, E, F

QUESTION NO: 2

You need to redesign the SQL Server database environment to meet the high availabilityrequirements. You also want to minimize changes to the code that currently accesses the databases.

What should you do?

A. Design the SQL Server com puters to use a Unicast MAC address.

B. Design the SQL Server computers to use a multicast MAC address.

C. Create two virtual servers that have the same names as the SQL Server computers

D. Rename the two SQL Server computers. Create two virtual servers that use the original

server names.

Answer: D

QUESTION NO: 3

You need to design directory services for the Web portal. Which element should you include in your design?

A. Create a role-based user database for portal users.

B. Create local user accounts for portal users on each Web portal server.

C. Create user accounts for the Web portal users in the institute’s existing Active Directory

forest.

D. Create user accounts for the Web portal users in a dedicated Active Directory forest for

the perimeter network.

Answer: C

QUESTION NO: 4

You need to design a method for authorized users to access the portal from the Internet.

Which connection method should be used for the authentication?

A. An HTTPS connection to the Web portal servers.

B. A VPN client connection to an NLB VPN cluster.

C. A VPN client connection to a Cluster service VPN cluster.

D. A Terminal Services Win32 client connection to the Web portal servers.

E. A VPN client connection to a single VPN server.

Answer: A

QUESTION NO: 5

You need to redesign the Terminal Services environment to meet the net requirements.Which four changes should you make? Each correct answer presents part of the solution. (Choose four)

A. Update the Terminal Services Win32 client software on the users computers.

B. Migrate user accounts to an Active Directory domain.

C. Migrate user home directories to an NLB cluster.

D. Migrate users home directories to a Cluster service cluster.

E. Create a single NLB cluster that includes all four Terminal Services servers.

F. Create two Cluster service clusters for the Terminal Service servers.

G. Move all the Terminal Services servers to the same subnet.

Answer: B, D, E, G

QUESTION NO: 6

You want the production environment to support application deployment for Proseware Inc and Lucerne Publishing. Which three elements should you include in your design?(Each correct answer presents part of the solution. Choose three)

A. Deploy a common NLB cluster for Proseware Inc, and lucerne Publishing.

B. Deploy a separate NLB cluster for Proseware Inc, and lucerne Publishing.

C. Deploy a common Cluster Service cluster for Proseware Inc, and lucerne Publishing.

D. Deploy a shared NLB cluster for Proseware Inc, and lucerne Publishing.

E. Place the application from Proseware Inc and Lucerne Publishing on shared

application servers.

F. Place the application from Proseware Inc and Lucerne Publishing on separate application servers.

Answer: C, D, E

QUESTION NO: 7

Content deployment is shown in the content deployment diagram. Where must all

COM+ components be installed? (Choose all that apply)

A. Component Load Balancing (CLB) cluster servers.

B. redeployment testing cluster servers.

C. production cluster servers

D. mangement console

Answer: A, B, C

QUESTION NO: 8

You need to design a method for storing the operation system, paging file, applications and data on the database server. Which method should you include in your design?

A. Use one Raid 1 Drive array for data. Use another Raid 1 drive array for the paging file.

Use the Raid 5 drive array For the operating system, applications, and log files.

B. Use one Raid 1 Drive array for the operating system, applications, and paging file. Use

another Raid 1 drive array for the log files. Use the Raid 5 drive array for the data.

C. Use one Raid 1 Drive array for the operating system, and applications. Use another

Raid 1 drive array for the paging file. Use the Raid 5 drive array for the data, and log files.

for the paging file, applications, and log files.. Use the Raid 5 drive array for data.

Answer: B

QUESTION NO: 9

Content deployment is shown in the content deployment diagram. You need to design a method to move new content from Stage1 to Pre1. Which method should you include in your design?

A. Create an application in Microsoft Application Center 2000, and then deploy the

application.

B. Set up load balancing between servers, and use Xcopy

C. Set up application synchronization between servers.

D. Install and use Content Deployment Service.

Answer: D

QUESTION NO: 10

Content deployment is shown in the content deployment diagram. What should you do before you deploy content from Stage1 to Pr1?

A. Disable automatic synchronisation.

B. Drain Users.

C. Set load balancing offline.

D. Create Microsoft Application Center application.

Answer: A

QUESTION NO: 11

Need to define which information will be stored in Active Directory. Which information should be placed in Active Directory? (Choose all that apply)

A. Event logs

B. Profile path

C. User profile

D. Home work assignments

E. Shopping transactions

F. Group membership

Answer: C, D, F

QUESTION NO: 12

Which affinity setting should you set in the Consolidated Web site?

A. None on Web cluster, Single on SSL Web cluster

B. Class C on Web cluster, None on SSL Web cluster

C. None on Web cluster, Class C on SSL Web cluster

D. Single on Web cluster, Class C on SSL Web cluster

Answer: B

QUESTION NO: 13

Want to analyze end-to-end bandwidth requirements. A teacher at new school has 4 classes with 25 students each. He gives all students the same 5 assignments. Each student downloads assignments. Total amount of data send to school?

A. 1 MB

B. 8 MB

C. 25 MB

D. 200 MB

Answer: D