GIAC GIAC Secure Software Programmer - C#.NET : GSSP-NET

You work as a Software Developer for ABC Inc. You create a Console application named
ConsoleApplication4. You use the System.Security.Cryptography namespace. You want to use the key lengths of 384 bits to 16384 bits. You use RSACryptoServiceProvider class to encrypt and decrypt data. Which of the following code segments will you use to accomplish this task?
Each correct answer represents a part of the solution. Choose all that apply.

• A. UnicodeEncoding ByteConverter = new UnicodeEncoding(); byte[] DataToEncrypt = ByteConverter.GetBytes("Encrypt this line for testing"); byte[] encryptData;
  byte[] decryptData;
  RSACryptoServiceProvider RSA = new RSACryptoServiceProvider();
  encryptData = RSA.Encrypt(DataToEncrypt, true);
  Console.WriteLine("Encrypted : {0}", ByteConverter.GetString(encryptData));
  decryptData = RSA.Decrypt(encryptData,true);
  Console.WriteLine("Decrypted : {0}", ByteConverter.GetString(decryptData));
• B. UnicodeEncoding ByteConverter = new UnicodeEncoding();
  byte[] DataToEncrypt = ByteConverter.GetBytes("Encrypt this line for testing");
  byte[] encryptData;
  byte[] decryptData;
  RSACryptoServiceProvider RSA = new RSACryptoServiceProvider();
  encryptData = RSA.Encrypt(DataToEncrypt, false);
  Console.WriteLine("Encrypted : {0}", ByteConverter.GetString(encryptData));
  decryptData = RSA.Decrypt(encryptData,true);
  Console.WriteLine("Decrypted : {0}", ByteConverter.GetString(decryptData));
• C. UnicodeEncoding ByteConverter = new UnicodeEncoding();
  byte[] DataToEncrypt = ByteConverter.GetBytes("Encrypt this line for testing");
  byte[] encryptData;
  byte[] decryptData;
  RSACryptoServiceProvider RSA = new RSACryptoServiceProvider();
  encryptData = RSA.Encrypt(DataToEncrypt, false);
  Console.WriteLine("Encrypted : {0}", ByteConverter.GetString(encryptData));
  decryptData = RSA.Decrypt(encryptData,false);
  Console.WriteLine("Decrypted : {0}", ByteConverter.GetString(decryptData));
• D. UnicodeEncoding ByteConverter = new UnicodeEncoding();
  byte[] DataToEncrypt = ByteConverter.GetBytes("Encrypt this line for testing");
  byte[] encryptData;
  byte[] decryptData;
  RSACryptoServiceProvider RSA = new RSACryptoServiceProvider();
  encryptData = RSA.Encrypt(DataToEncrypt, true);
  Console.WriteLine("Encrypted : {0}", ByteConverter.GetString(encryptData));
  decryptData = RSA.Decrypt(encryptData,false);
  Console.WriteLine("Decrypted : {0}", ByteConverter.GetString(decryptData));

You work as a Software Developer for ABC Inc. The company uses Visual Studio .NET 2008 as its application development platform. You have recently finished the development of an ASP.NET Web application using .NET Framework 3.5. The application must be deployed by using the http://www.ABC.com/ URL. The application has several Web forms.
You need to implement Really Simple Syndication (RSS) feeds functionality. The RSS feeds will be used by the http://www.ABC.com/Updates.rss URL. You must ensure that the application displays the RSS-formatted information when accessing the given URL. What will you do to accomplish this?
Each correct answer represents a part of the solution. Choose two.

• A. Create and register a custom HttpHandler class that releases the RSS feeds.
• B. Add the HttpHandler class to the .rss extension.
• C. Create an ASMX Web service component named Updates.
• D. Create a Web form named Updates that releases the RSS feeds.
• E. Create and register a custom HttpModule class.

You work as a Software Developer for ABC Inc. The company uses Visual Studio.NET as its application development platform. You create an application using .NET Framework. You need to establish a Secure Sockets Layer (SSL) session with a remote server. The security policy of the company requires that both the client and server to provide a valid certificate for authentication before communications begins. Which of the following properties of the SslStream class will you use to accomplish this task?

• A. SslStream.IsMutuallyAuthenticated
• B. SslStream.IsAuthenticated
• C. SslStream.IsServer
• D. SslStream.IsSigned
• E. SslStream.IsEncrypted

You work as a Software Developer for ABC Inc. You develop a Windows-based application named MyApp. The application contains a form named MyForm1 that displays a submit form for registered users. You want to implement a user interface for the application. Which of the following requirements will you consider for the user interface?
Each correct answer represents a complete solution. Choose all that apply.

• A. The user-entered data are validated through the validation checks applied in the Windows Forms controls.
• B. The application components are allowed to handle logging of user-entered data.
• C. The application saves the user-entered data and checks the integrity of the data.
• D. Users are allowed to enter data in the required fields on the form.

Smith works as a Software Developer for BlueWell Inc. He develops a Web application named WebApp by using Visual Studio .NET. He wants to deploy WebApp on a target computer. He wants to take precautionary measures in the application so that no issues may arise while deploying it. Which of the following measures will Smith take to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

• A. Use a tracing feature to trace and gather information about each step in the program execu tion.
• B. Respond to health monitoring events in order to log performance and error-related conditio ns.
• C. Use a technique to avoid errors and to store error-related information.
• D. Organize data in the application configuration files.
• E. Use a debugger to step through the application code while it is running.