Microsoft 70-486 Braindumps 2021

NEW QUESTION 1
You are developing an ASP.NET MVC application that uses forms authentication. The application uses SQL queries that display customer order data.
You need to prevent all SQL injection attacks against the application.
How should you secure the queries?

• A. Implement parameterization.
• B. Pattern check the input.
• C. Filter out prohibited words in the input.
• D. Escape single quotes on string-based input parameters.

Answer: A

Explanation: With most development platforms, parameterized statements that work with parameters can be used (sometimes called placeholders or bind variables) instead of embedding user input in the statement. A placeholder can only store a value of the given type and not an arbitrary SQL fragment. Hence the SQL injection would simply be treated as a strange (and probably invalid) parameter value.
References:

NEW QUESTION 2
You have a class that includes the following code. (Line numbers are included for reference only.)

You must enforce the following requirements for the actions:

You need to configure the class.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Option A
• B. Option B
• C. Option C
• D. Option D
• E. Option E
• F. Option F

Answer: BEF

Explanation: References: https://docs.microsoft.com/en-us/aspnet/core/security/authorization/roles?view=aspnetcore-2.1

NEW QUESTION 3
You are developing an ASP.NET MVC web application.
You need to create a form that can be used to add new products to the web application. You have the following markup:

Which markup segments should you include in Target 1, Target 2, Target 3 and Target 4 to complete the markup? To answer, drag the appropriate markup segments to the correct targets. Each markup segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Target 1: <form action="/Products/Create" method="post"> The form methods are post and get (not submit).
Target 2: <td>@Html.Textbox(@Model.ProductName)</td>
The InputExtensions.TextBox method returns a text input element. The TextBox method is designed to make it easy to bind to view data or model data.
Target3: <td>@Html.Textbox(@Model.UnitPrice)</td>
The InputExtensions.TextBox method returns a text input element. The TextBox method is designed to make it easy to bind to view data or model data.
Target 4: <input type="submit" value="Save"/>
The submitattribute, of input type, declares a submit button. The input type attribute does not have a post attribute. References:
https://weblogs.asp.net/scottgu/asp-net-mvc-preview-5-and-form-posting-scenarios https://msdn.microsoft.com/en-us/library/system.web.mvc.html.inputextensions.textbox(v=vs.118).aspx

NEW QUESTION 4
You are developing an ASP.NET MVC application.
You need to authenticate clients by using NT LAN Manager (NTLM). Which authentication method should you implement?

• A. Basic
• B. Windows
• C. Forms
• D. Kerberos

Answer: B

Explanation: References:
http://msdn.microsoft.com/en-us/library/aa292114(v=vs.71).aspx

NEW QUESTION 5
An advertising campaign was recently launched. Some of the ads contain a link to products that no longer exist or have IDs that have changed.
You need to ensure that all product links display a product. Which code segment should you use to configure the route?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

NEW QUESTION 6
The GetDealPrice method must be called by using Ajax.
You need to get the price of a product by using the GetDealPrice method of the ProductController.
Which code segment should you use? (Each correct answer presents a complete solution. Choose all that apply.)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: CD

NEW QUESTION 7
You are developing an ASP.NET MVC application that enables you to edit and save a contact. The application must not save on an HTTP GET request.
You need to implement the controller.
Which two possible code segments should you use? Each correct answer presents a complete solution.

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: AB

Explanation: A: We retrieve the GET and POST methods through this.HttpContext.Request.RequestType.
B: This is the default MVC implementation of having separate methods for GET and POST via function overloading.
Incorrect:
Not D: We retrieve the GET and POST methods through this.HttpContext.Request.RequestType, not through this.HttpContext.Request["ActionName"].

NEW QUESTION 8
A company has an enterprise library that targets the full .NET framework.
You must convert the library to target .NET Standard. You replace the original project file with a .NET Standard project file. When you compile the library, the compiler throws the following errors: error CS0579: Duplicate 'System.Reflection.AssemblyCompanyAttribute" error CS0579: Duplicate 'System.Reflection.AssemblyVersionAttribute'
You need to resolve the errors.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Delete the Main folder and recompile the library.
• B. Delete the Properties folder and recompile the library.
• C. Add the GenerateAssemblylnfo property to the .NET Standard project file and set the value to False.
• D. Add the GenerateAssemblylnfo property to the .NET Standard project file and set the value to True.

Answer: BD

NEW QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing an ASP.NET Core MVC web application.
The application must be exposed to external users over ports 80 and 443 and must meet the following requirements:
• Handle more than 1024 simultaneous connections.
• Support Windows authentication.
• Support HTTP/2 over TLS.
• Include response caching.
• Protect against denial-of-service attacks.
You need to deploy the application to an on-premises web server. Solution: You deploy the application to Kestrel with an US reverse proxy.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 10
You need to update the routes to ensure that a product is always displayed on the product page. Which code segment should you use?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 11
You need to implement the requirements for handling IIS errors. What should you do?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

NEW QUESTION 12
You are developing an ASP.NET MVC application. Devices that use many different browsers will use the application.
You have the following requirements:

You need to configure the application.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Use JavaScript to evaluate the window.innerWidth and window.innerHeigh properties.
• B. Set the value of the width property for the viewport meta tag to device-width.
• C. Use CSS to target the HTML element on each pag
• D. Set the values of the width and height properties to 100%.
• E. Use CSS media queries to target screen size, device orientation, and other browser capabilities.

Answer: BD

Explanation: B: If you want the viewport width to match the device’s physical pixels, you can specify the following:
<meta name="viewport" content="width=device-width">
For this to work correctly, you must not explicitly force elements to exceed that width (e.g., using a width attribute or CSS property), otherwise the browser will be forced to use a larger viewport regardless.
D: Media queries in CSS3 extend the CSS2 media types idea: Instead of looking for a type of device, they look at the capability of the device.
Media queries can be used to check many things, such as: width and height of the viewport
width and height of the device
orientation (is the tablet/phone in landscape or portrait mode?) resolution
Using media queries are a popular technique for delivering a tailored style sheet to tablets, iPhone, and Androids.
References:
https://www.asp.net/whitepapers/add-mobile-pages-to-your-aspnet-web-forms-mvc-application
http://www.w3schools.com/css/css3_mediaqueries.asp

NEW QUESTION 13
You develop an ASP.NET MVC application. The application has several Razor views. The application must execute different server-side code for desktop and mobile devices. You need to choose an approach to support mobile devices.
Which two approaches can you use? Each correct answer presents a complete solution.

• A. Use different controllers and view for both desktop and mobile browsers, but render the views using Bootstrap framework.
• B. Create separate areas for desktop and mobile browsers, implementing independent controllers and views for each.
• C. Use the same controllers for both desktop and mobile browsers, but render different views depending on the device type.
• D. Use different controllers and views for both desktop and mobile browsers, but render the views with the same Razor layout depending on the device type.

Answer: AC

Explanation: How ASP.NET MVC applications can present mobile-specific pages
Since the Model-View-Controller pattern decouples application logic (in controllers) from presentation logic (in views), you can choose from any of the following approaches to handling mobile support in server-side code:
References:
https://docs.microsoft.com/en-us/aspnet/whitepapers/add-mobile-pages-to-your-aspnet-web-forms-mvc-applicat

NEW QUESTION 14
HOTSPOT
You are developing an ASP.NET MVC application that will be hosted on Microsoft Azure. The application includes the StackExchange.Redis client package. A variable named CacheConnectionConfiguration stores the cache endpoint URL and the password to connect to the cache.
The application must store a user's color selection by using the Azure Redis cache. The cached value must expire after 90 minutes. You need to cache the user's color selection.
How should you complete the relevant code? To answer, choose the appropriate code segment from each list in the answer area.

Answer:

Explanation: Box 1: var cache = connection.GetDatabase():
Once the connection is established, return a reference to the redis cache database by calling the ConnectionMultiplexer.GetDatabase method.
Box 2: cache StringSet(“color”, colorSelection,TimeSpan.FromMinutes(90));
The TimeSpanFromMinutes method returns a TimeSpan that represents a specified number of minutes, where the specification is accurate to the nearest millisecond.
Example: The following code snippet shows how to set an expiration time of 90 minutes on a key.
// Add a key with an expiration time of 90 minutes
await cache.StringSetAsync("data:key1", 99, TimeSpan.FromMinutes(90));
References: https://docs.microsoft.com/en-us/azure/redis-cache/cache-dotnet-how-to-use-azure-redis-cache https://msdn.microsoft.com/en-us/library/system.timespan.fromminutes(v=vs.110).aspx

NEW QUESTION 15
You are developing an ASP.NET MVC application that uses forms authentication against an Oracle database. You need to authenticate the users.
Which code segment should you use?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

Explanation: When implementing a custom membership provider, you are required to inherit the MembershipProvider abstract class.
There are two primary reasons for creating a custom membership provider.
You need to store membership information in a data source that is not supported by the membership providers included with the .NET Framework, such as a FoxPro database, an Oracle database, or other data source.
You need to manage membership information using a database schema that is different from the database schema used by the providers that ship with the .NET Framework. A common example of this would be membership data that already exists in a SQL Server database for a company or Web site.

NEW QUESTION 16
Your company uses Microsoft Azure DevTest Labs for testing applications.
The DevTest Labs environment must provide a preconfigured base image for a virtual machine that can be used for all development efforts. The virtual machine must be able to be reproduced m various environments.
You need to provision the virtual machine. What should you implement?

• A. custom images
• B. formulas
• C. Marketplace images
• D. artifacts

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-comparing-vm-base-image-types https://blogs.msdn.microsoft.com/devtestlab/2021/04/06/custom-images-or-formulas/

NEW QUESTION 17
You are designing a data-oriented application that features a variety of storage schemas. The application object model must be mapped to the various storage schemas.
You need to enable developers to manipulate the data.
Which ADO.NET data access strategy should you use? (Each correct answer presents a complete solution.
Choose all that apply.)

• A. LINQ to SQL
• B. Entity Framework
• C. DataAdapter
• D. DataReader

Answer: ABC

NEW QUESTION 18
You are developing an application that uses many small images. When the images load, the application runs slowly.
You need to improve the performance of the application. What should you do?

• A. Preload all the images when the application starts to ensure that the images are cached.
• B. Convert the images to ICO file format and stream all images on a single connection.
• C. Host all images on a Microsoft Azure web role with multiple instances.
• D. Combine all the images into a single image and use CSS to create sprites.

Answer: D

Explanation: Because browsers limit how many concurrent HTTP requests they make to a website, a web page with many small icon images can result in a longer load time. You can combine many small images into a single larger image - a CSS sprite - using the free ASP.NET Sprite and Image Optimization Library available from Microsoft.
References:

NEW QUESTION 19
You are developing a Microsoft Azure ASP.NET Core web application named onlinestore.
Users report bugs with the web application that only occur on development deployments. The bugs are in a third-party component.
You need to gather a memory dump of the running application to provide to the component vendor.
How should you construct the URI to gather the memory dump? To answer, drag the appropriate URI segments to the correct locations. Each URI segment may be used once, more than once, or mot at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: