You use Microsoft Visual Studio 2010 and Microsoft .NET Framework 4.0 to create an application.
The application connects to a Microsoft SQL Server database. The application stores user names and
passwords in the database.
You need to ensure that users cannot read passwords extracted from the database. What should you do?

• A. Append a random salt to the password by using the RNGCryptoServiceProvider class. Encrypt stored passwords by using the RijndaelManaged class.
• B. Append a random salt to the password by using the RNGCryptoServiceProvider class. Hash stored passwords by using the SHA1CryptoServiceProvider class.
• C. Encrypt stored passwords by using the RC2CryptoServiceProvider class.
• D. Encrypt stored passwords by using the TripleDESCryptoServiceProvider class.

You use Microsoft Visual Studio 2010 and Microsoft .NET Framework 4.0 to develop an application that uses the ADO.NET Entity Framework to model entities. You create an entity model as shown in the following diagram.

You need to ensure that all Person entities and their associated EmailAddresses are loaded. Which code segment should you use?

• A. var people = context.People.Include("EmailAddresses").ToList();
• B. var people = context.People.Include("Person.EmailAddresses").ToList();
• C. var people = context.People.Except(new ObjectQuery<Person>("EmailAddresses", context)).ToList();
• D. var people = context.People.Except(new ObjectQuery<Person>("Person.EmailAddresses", context)).ToList();

You use Microsoft .NET Framework 4.0 to develop an application that connects to two separate Microsoft
SQL Server 2008 databases.
The Customers database stores all the customer information, and the Orders database stores all the order
information.
The application includes the following code. (Line numbers are included for reference only.)
01 try
02 {
03 conn.Open();
04 tran = conn.BeginTransaction("Order");
05 SqlCommand cmd = new SqlCommand();
06 cmd.Connection = conn;
07 cmd.Transaction = tran;
08 tran.Save("save1");
09 cmd.CommandText = "INSERT INTO [Cust].dbo.Customer " + "(Name,
PhoneNumber) VALUES ('Paul Jones', " + "'404-555-1212')";
10 cmd.ExecuteNonQuery();
11 tran.Save("save2");
12 cmd.CommandText = "INSERT INTO [Orders].dbo.Order " + "(CustomerID)
VALUES (1234)";
13 cmd.ExecuteNonQuery();
14 tran.Save("save3");
15 cmd.CommandText = "INSERT INTO [Orders].dbo." + "OrderDetail (OrderlD,
ProductNumber) VALUES" + "(5678, 'DC-6721')";
16 cmd.ExecuteNonQuery();
17 tran.Commit();
18 }
19 catch (Exception ex)
20 {
21 ...
22 }
You run the program, and a timeout expired error occurs at line 16. You need to ensure that the customer
information is saved in the database.
If an error occurs while the order is being saved, you must roll back all of the order information and save the
customer information.
Which line of code should you insert at line 21?

• A. tran.Rollback("save2");
• B. tran.Rollback("save2"); tran.Commit();
• C. tran.Rollback();
• D. tran.Rollback(); tran.Commit();

You use Microsoft .NET Framework 4.0 to develop an ASP.NET 4 Web application.
You need to encrypt the connection string information that is stored in the web.config file. The application is
deployed to multiple servers.
The encryption keys that are used to encrypt the connection string information must be exportable and
importable on all the servers.
You need to encrypt the connection string section of the web.config file so that the file can be used on all of
the servers.
Which code segment should you use?

• A. Configuration config = WebConfigurationManager.OpenMachineConfiguration ("~") ; ConnectionStringsSection section = (ConnectionStringsSection)config.GetSection ("connectionStrings") ; section.Sectionlnformation.ProtectSection("DpapiProtectedConfigurationProvider"); config.Save () ;
• B. Configuration config = WebConfigurationHanager.OpenWebConfiguration ("~") ; ConnectionStringsSection section = (ConnectionStringsSection)config.GetSection ("connectionStrings") ; section.Sectionlnformation.ProtectSection("DpapiProtectedConfigurationProvider"); config.Save ();
• C. Configuration config = WebConfigurationManager.OpenMachineConfiguration("~"); ConnectionStringsSection section = (ConnectionStringsSection)config.GetSection("connectionStrings"); section.Sectionlnformation.ProtectSection("RsaProtectedConfigurationProvider'*); config.Save();
• D. Configuration config = WebConfigurationManager.OpenWebConfiguration("~") ; ConnectionStringsSection section = (ConnectionStringsSection)config.GetSection("connectionStrings"); section.Sectionlnformation.ProtectSection("RsaProtectedConfigurationProvider"); config.Save();