Q 1 - You work for a financial services company that deals with many small brokers. Your executives want to be able to run a report that details all the actions taken by the brokers on the site as a form of auditing and protection. Neither the application nor system currently stores this kind of information. Which of the following are viable solutions? (Choose all that apply.)

A - Create a globally applied custom action filter that implements the OnActionExecuting method. Have it store the user, the URL, and the forms collection.

B - Create a globally applied custom action filter that implements the OnActionExecuting method. Have it store the user, the URL, and the forms collection.

C - Create a globally applied custom action filter that implements the OnActionExecuted method. Set the AllowMultiple parameter to false in the filter. Have it store the user, the URL, and the forms collection.

D - Override the AuthorizeAttribute and have it store the user, the URL, and the forms collection.

E - A and C both

F - All of the above

Q 2 - You are adding the capability for users to customize their site's display colors. You are required to provide a slider that enables users to change each RGB element. What can you do to ensure that this gets treated in the model and stored in the database as a single RGB color? (Choose all that apply.)

A - Strongly bind the sliders to their own individual fields in the model. Ensure that the model unit for color only implements the GET, where you write code that concatenates the values.

B - Create a custom model binder that knows to look for the three values and how to put them together to get the single color.

C - Add the three different elements to the model and ensure that your update statement to the database correctly joins the elements to get the appropriate color.

D - Create a custom model binder that evaluates the entire color customization process and binds the entire model rather than just managing a subset of the information.

E - B and D both

F - All of the above

Q 3 - You are working on a AJAX-heavy site, and your script files are separated in your solution by function. You have already implemented minification and bundling, but you are still getting reports of poor performance when users try to access your pages. You cannot replicate the problem locally. What additional steps can you take and still provide the same user experience?

A - Compress all scripts locally and have the users download the compressed files rather than the uncompressed files.

B - Turn IIS compression on, turn on the option to compress dynamic pages, and set the minimum file size to 0 so that every file served will be compressed.

C - Turn IIS compression on, disable dynamic page compression, and set the minimum file size to the size of your smallest bundled script file.

D - There is nothing more to do without redesigning the site.

E - A and C both

F - All of the above

Q 4 - You want to implement bundling and minification in your site. What are some of the potential problems you need to be aware of? (Choose all that apply.)

A - None; there is no condition in which this is a poor decision.

B - You need to be sure you do not bundle too many scripts together because you cannot take advantage of concurrent downloads if only one or two files are being downloaded.

C - You should bundle and minimize scripts and CSS files together for maximum effectiveness.

D - Not bundling logically linked scripts together can have a negative effect on performance.

E - B and D both

F - All of the above

Q 5 - Your U.S.-based company recently opened an office in England. Staff members have been making lots of sales calls, which have generated an increase in visits to the company's websites. Much of the activity involves downloading sales sheets, product descriptions, and other sales support information currently stored in PDFs. There have been some performance-related complaints from remote sales staff, but no local users have noticed any problems. Which of the following are potential solutions? (Choose all that apply.)

A - Bundle and minify the PDF files to ensure that there is no wasted space.

B - Write an action result that takes a file name and returns a compressed version of the file for download.

C - Sign on with a CDN with nodes in North America and Europe and use it to serve files and other static content to sales support staff.

D - Add two additional servers and create a server farm to serve your content.

E - B and C both

F - All of the above

Q 6 - Your application has an intermittent issue, based on the user's path through the application, in which the application seems to stop running. Even when running in debug mode, the application calls a web service and then stops. The application locks and the call never returns, thus the user's request is never completed and eventually times out. What performance or profiling tool will provide the most pertinent information about your application?

A - CPU sampling in the Performance Wizard

B - Memory allocation in the Performance Wizard

C - Resource contention data in the Performance Wizard

D - Tracing from the System.Diagnostics namespace that logs the times of web service call and web service return

E - The Health Monitoring tool, for capturing security information related to the interaction with the web service

F - A and D both

Q 7 - You inherited a working application that began as a proof of concept but was eventually adopted as a production application without being refactored. Many new requirements need to be added. As part of your initial analysis, you notice a lot of problems with bad data. Which solutions will help remediate this issue? (Choose all that apply.)

A - Running the Performance Wizard to sample CPU usage

B - Adding code contracts to ensure that the input parameters have expected values

C - Adding code contracts to ensure that the return values meet specific criteria

D - Adding code contracts to ensure that objects do not become invalid during process

E - Running the Visual Studio profiler to analyze application flow

F - B, C and D

Q 8 - You are helping a client estimate the effort involved in adding comprehensive monitoring to an enterprise-level ASP.NET MVC application. Which of the following are useful considerations while building the estimate? (Choose all that apply.)

A - Adding health monitoring involves many choices. An evaluation will have to be performed to determine which monitors will be of real use.

B - Adding generic logging can be done as part of the rework. After the logging pattern has been established, you can add logging as part of any new work and as part of the refactoring process.

C - Adding tracing must be done completely and comprehensively before it can be of any use. There is no point in implementing tracing in a single part of the application if you are not going to refactor the application.

D - Creating a data collection set in Performance Monitor will provide all the needed information and can be set up in a few minutes.

E - A and B both

F - All of the above

Q 9 - You are re-creating an application that was originally built with ASP 2.0. You need to break the monolithic application into a traditional three-tier application. One of the requirements is that database errors must be displayed in the UI. Which solution will present enough information to the user so they can notify the appropriate person of a problem, but not allow the user to gain information about the design of the database?

A - Add a first chance exception handler and log the information in the error.

B - Add a generic database-layer exception handler to the business layer, and pass appropriate error information to the UI layer for display in a custom error page.

C - Add specific database exception handlers in the business layer and log the information into the database for further review.

D - Let the errors pass through the business layer to the UI layer where they can be handled as specific errors and presented as appropriate in the UI.

E - A and D both

F - All of the above

Q 10 - What is an advantage to using first chance exception notification?

A - The ability to capture and handle all exceptions that occur within the application in one place

B - The ability to log an exception after it is handled by its appropriate error handling code

C - The ability to log an exception before it is touched by any other error handler

D - The ability to forward an exception to an error handler based on the type of exception that was thrown

E - A and D both

F - All of the above

Q 11 - Using custom error pages provides a lot of flexibility to an application because it allows for a consistent user experience even when the application has a problem. To take full advantage of this flexibility, you need to be able to create the pages and configure the application to use these pages. What code will provide custom error pages for 404 errors and general exceptions?

A - <system.web><customErrors mode="RemoteOnly" defaultRedirect="Error/GeneralException"><errorstatusCode="404"redirect="ErrorController.Status404"/></customErrors></system.web>

B - <system.web><customErrors mode="RemoteOnly" defaultRedirect="Error/GeneralException"><error statusCode="404" redirect="Error/Status404" /></customErrors></system.web><system.webServer><httpErrorserrorMode="Detailed"/></system.webServer>

C - <system.web><customErrors mode="RemoteOnly"><error statusCode="404" redirect="Error/Status404" /><errorstatusCode="GeneralException" redirect="Error/GeneralException"/></customErrors></system.web><system.webServer><httpErrorserrorMode="Detailed"/></system.webServer>

D - <system.web><customErrors mode="LocalOnly" defaultRedirect="Error/GeneralException"><error statusCode="404" redirect="Error/Status404" /></customErrors></system.web><system.webServer><httpErrorserrorMode="Detailed"/></system.webServer>

E - A and D both

F - All of the above

Q 12 - You are under contract with a large company that is starting to implement a TDD approach. As part of the long-term support for this effort, the company needs you to complete several unit tests. As you review the current code base, you find good tests for the model, but no tests for anything other than the model. Which of the following is the best approach to complete the unit tests?

A - Create a new directory in the unit test project for the controllerand actionspecific tests. Create a unit test file for each controller. Inside that file, have one or more tests for only the controller action methods.

B - Add a new file to the unit test project called ControllerTests. Put all tests for all the controllers and the actions in the file.

C - Create a new directory in the unit test project for the controllerand actionspecific tests. Create a unit test file for each action you are going to test.

D - Create a new directory in the unit test project for the controllerand actionspecific tests. Create a unit test file for each controller. Inside that file have one or more tests for all methods in the controller, regardless of whether they are an action or not.

E - A and D both

F - All of the above

Q 13 - Your ASP.NET MVC web application has just been released to a group of pilot users. The users are reporting periods of extreme performance degradation. You did not encounter performance issues during development or the quality assurance phase. What can you do in your development environment to understand what is occurring in the production environment?

A - Create a set of unit tests that repeatedly test certain parts of the application. Run them continuously over a period of time to ensure that the application works as expected.

B - Create a set of web tests that exercise the application. Set a run load of 50 percent of your pilot users and run them in a constant load testing process to validate the application's behavior.

C - Create a set of web tests that exercise the application. Using a step approach, start with a minimal number of users and increase to the total number of users in the pilot program.

D - Create a set of web tests that exercise the application. Using a goal-based approach, set the process to run to 75 percent CPU utilization. When you reach that point, compare the results with the number of users in the pilot program.

E - A and D both

F - All of the above

Q 14 - You support hardware purchasing for an ASP.NET MVC application in your company. The application is finished, and the development team knows the number of intended users. Which approach will give the team the best understanding of the application's hardware needs?

A - Create several web tests that exercise all parts of the application, including all static pages. Run these tests in a constant load at various levels to see the effect on performance.

B - Create several web tests that exercise all parts of the application, including all static pages. Run these tests in a step approach up to the maximum expected number of users. This will give you an idea of the load one server can handle.

C - Create several web tests that exercise all parts of the application, including allstatic pages. Run these tests in a goal-based approach in which the percent of CPU usage and percent of memory usage metrics are set to the company standard maximums. Evaluate how many users it takes to reach the maximum levels.

D - Create several web tests that exercise only the dynamic parts of the application, ignoring all static content. Run these tests in a goal-based approach in which the percent of CPU usage and percent of memory usage metrics are set to the company standard maximums. Evaluate how many users it takes to reach these maximum levels.

E - A and B both

F - All of the above

Q 15 - You will be deploying your application in Windows Azure. You know that you need to include logging, but you have some concerns. What diagnostic capabilities can Windows Azure support? (Choose all that apply.)

A - The capability to turn on and off different aspects of the Windows Azure diagnostics through configuration changes

B - The capability to retain logs from your custom logging solution on a Windows Azure storage account

C - The capability to retain logs from your custom logging solution when written to a local store

D - The capability to send entries to the Windows Azure diagnostics system from within your application

E - A , B and D

F - All of the above

Q 16 - What do you need to do to use IntelliTrace from within Windows Azure? (Choose all that apply.)

A - Publish the solution from any version of Visual Studio Professional 2012 or higher.

B - Select the Enable IntelliTrace check box before publishing the solution.

C - Ensure that you made all configuration changes in the Web.config file that will turn on IntelliTrace.

D - Download and view the IntelliTrace logs through a web browser.

E - Download and view the IntelliTrace logs through Visual Studio Ultimate 2012.

F - B and E both

Q 17 - You want to configure Windows Azure diagnostics. Where do you configure the specific Performance Monitors you want to have run in support of your application?

A - ServiceDefinition.csdef

B - ServiceConfiguration.cscfg

C - Diagnostics.wadcfg

D - Web.config

E - A and B both

F - All of the above

Q 18 - What type of authentication accepts login credentials that will be checked against the domain or local server and are sent in a hashed format?

A - Basic authentication

B - Digest authentication

C - Forms authentication

D - Windows authentication

E - A and B both

F - All of the above

Q 19 - Forms authentication enables you to write code to validate user credentials. After it is complete, you can register the authentication cookies for use throughout the user's visit by using which of the following?

A - FormsAuthentication.SetAuthCookie

B - FormsAuthenticationCookie = new FormsAuthenicationCookie();

C - FormsAuthentication.ClearAuthCookie

D - MembershipProvider.User =

E - A and B both

F - All of the above

Q 20 - What default attributes or inline checks would you use to create an accepted-list scenario in ASP.NET MVC 4? (Choose all that apply.)

A - Authorize attribute

B - RequireHttps attribute

C - WebSecurity.IsAuthenticated

D - AllowAnonymous attribute

E - A and D both

F - All of the above

Q 21 - What interfaces or classes should be implemented or inherited when creating custom authentication that is based on a non-Windows, third-party provider? (Choose all that apply.)

A - ActiveDirectoryMembershipProvider

B - IIdentity

C - SqlMembershipProvider

D - Iprincipal

E - B and D both

F - All of the above

Q 22 - What kind of helper methods does WebSecurity provide? (Choose all that apply.)

A - Login

B - ResetPassword

C - CreateAccount

D - ChangePassword

E - DeleteAccount

F - A ,B , C and D

Q 23 - What attribute or code snippet within a controller enables a role named Admin to access actions or code blocks after the check-in code?

A - RoleProvider.GetRolesForUser("Admin")

B - [Authorize(Roles="Admin")]

C - RoleProvider.IsUserInRole(User.Name)

D - [AuthorizeAttribute(Roles="Admin")]

E - A and B both

F - All of the above

Q 24 - Which methods help the RoleProvider determine whether a user is assigned a role or set of roles? (Choose all that apply.)

A - GetRoles

B - GetRolesForUser

C - IsUserInRole

D - FindUsersInRole

E - B and C both

F - All of the above

Q 25 - Why should you create a custom role provider? (Choose all that apply.)

A - To use a data source not regularly supported

B - To use the SimpleRoleProvider

C - To use a database design different than .NET provides

D - To provide a special configuration file entry

E - B and C both

F - All of the above