Microsoft TS: Windows Communication Foundation velopment with Microsoft .NET Framework 4 Sample Questions:

1. You are creating a Windows Communication Foundation (WCF) service that accepts claims-based tokens.
You need to ensure that the service can use claims from trading partners even though there are variations on naming for the same elements.
Which two actions should you perform? (Each correct answer presents part of the solution Choose two.)

A) Register a custom Service Authorization Manager that implements Check Access In this method, use System. Convert. Change Type to transform the incoming claim set to a Windows Claim Set type.
B) Register an Authorization Policy that maps external claims to an internal Claim Set.
C) Within the operation, verify the presence of the required claims in the current Authorization Context
D) Apply a Principal Permission attribute on the operation with the required claims listed in the Roles property.

2. An ASP.NET application hosts a RESTful Windows Communication Foundation (WCF) service at /Services/Contoso.svc . The service provides a JavaScript resource to clients. You have an explicit reference to the JavaScript in your page markup as follows.
<script type="text/3avaScript" src="/Secvices/Contoso.svc/js" />
You need to retrieve the debug version of the service JavaScript.
What should you do?

A) In the script tag, append debug to the src attribute.
B) In the <<H>@ Page <*to> header, set the Debug attribute to true.
C) In the script tag, add a debug attribute and set its value to true.
D) In the <<to@ ServiceHost %> header for /Services/Contoso.svc, set the Debug attribute to true.

3. You implement a Windows Communication Foundation (WCF) service. The service is hosted in Internet Information Services (IIS).
The service must use X.509 certificates to authorize specific methods.
You need to configure the service.
What should you do? (Each correct answer presents part of the solution. Choose two.)

A) In the web.config file for the service, in the serviceAuthorization element, set the value of the PrincipalPermissionMode attribute to UseAspNetRoles.
B) Set the value of the Name property of the PrincipalPermissionAttribute to the identity of the certificate.
C) In the web.config file for the service, in the serviceAuthorization element, set the value of the PrincipalPermissionMode attribute to UseWindowsGroups.
D) Set the value of the ControlEvidence property of the SecurityPermissionAttribute to the identity of the certificate.

4. You create a Windows Communication Foundation (WCF) sen/ice. It is deployed on Microsoft Internet Information Services (IIS) with an application pool running as Network Service. You enable WMI tracing before launching the service. Your IT support staff adds WMI data collection through ASP.NET WMI tracing.
You need to restrict the collection of WMI data to a privileged account.
What should you do in WMI Control in the Computer Management console?

A) Select the Root\Security namespace.
Remove Enable account permission for the Local System account.
B) Select the Root\ServiceModel namespace.
Remove Enable account permission for the Network Service account.
Add a custom user and grant that user Enable account permission.
C) Select the Root\aspnet namespace.
Remove Enable account permission for the Network Service account.
Add a custom user and grant that user Enable account permission.
D) Select the Root\aspnet namespace.
Remove Enable account permission for the Local System account.
Add a custom user and grant that user Enable account permission.

5. You develop a Windows Communication Foundation (WCF) service that employees use to access bonus information. You define the following service contract. (Line numbers are included for reference only.)
01 [ServiceContract(SessionMode = SessionMode.Required)]
02 public interface IFinancialService
03 {
04 [OperationContract]
05 string Login(int employeeID, string passwordHash);
06
07 [OperationContract]
08 double GetBonus(int month);
09
10 [OperationContract(IsTerminating = true)]
11 void Logout();
12 }
Client applications can invoke methods without logging in.
You need to ensure that the client applications invoke Login before invoking any other method.
You also need to ensure that client applications cannot consume the service after invoking Logout.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A) Replace line 07 with the following code. [OperationContract(IsInitiating = false)]
B) Replace line 04 with the following code. [OperationContract(IsInitiating = true, IsTerminating = true)]
C) Replace line 10 with the following code. [OperationContract(IsInitiating = false, IsTerminating = true)]
D) Replace line 04 with the following code. [OperationContract(IsInitiating = false)]

Solutions: