单选题A web application uses the HttpSession mechanism to determine if a user is “logged in”. When a user supplies a valid user name and password， an HttpSession is created for that user.  The user has access to the application for only 15 minutes after logg

第1题：

Upon a user’s first visit to the website， which two operations are always performed when the getSession method is called with no arguments in a servlet？（）

• A、 All URLs returned by the server are rewritten.
• B、 An HttpSession object is created if necessary.
• C、 The user name and password of the user are checked.
• D、 The session ID is stored in the HTTP response as a cookie.

第2题：

In form-based authentication， what must be included in the HTML returned from the URL specified by the  element？（）

• A、 a base-64 encoded user name and password
• B、 a form that POSTs to the j_security_check URL
• C、 an applet that requests the user name and password from the user
• D、 a hidden field that supplies the login-constraint used by the application

第3题：

Which statement is true regarding this setting?（）

• A、It drops the connection after the specified number of login attempts fail for any user.
• B、It is enforced only if the password profile is enabled for the user. 
• C、It locks the user account after the specified number of attempts. 
• D、It drops the connection after the specified number of login attempts fail only for users who have the SYSDBA privilege.

第4题：

You are developing a Web application. The Web application restricts access to an administrative page. The Web application uses the following code segment to protect the page.If Page.User.Identity.Name <> "CONTOSO/Administrator" Then Response.Redirect("login.aspx")End IfYou are logged on as Administrator. When you display the page, you are redirected to Login.aspx. You discover that the User.Identity.Name property is not being correctly populated. You need to ensure that you can access the page when you are logged on as Administrator. Which two actions should you perform? （）

• A、In the Web.config file, enable impersonation.
• B、In IIS, enable anonymous access.
• C、In IIS, disable anonymous access.
• D、In the Web.config file, set the authentication mode to Windows.

第5题：

You are implementing an ASP.NET Web application. Users will authenticate to the application with an ID. The application will allow new users to register for an account. The application will generate an ID for the user based on the users full name. You need to implement this registration functionality. Which two actions should you perform？（）

• A、Configure the SqlMembershipProvider in the web.config file.
• B、Configure the SqlProfileProvider in the web.config file.
• C、Create an ASP.NET page that contains a default CreateUserWizard control to create a new user account.
• D、Create an ASP.NET page that contains a custom form that collects the user information and then uses the Membership.CreateUser method to create a new user account.

第6题：

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

A technician needs to use Remote Assistance with a user. The user is asked to use an email application to send the technician an invitation to remotely access the user’s computer. The email application has not been configured in the user’s computer.  Which of the following would be another way for the user to send the Remote Assistance invitation？ （）

• A、Configuring the Windows Firewall exceptions.
• B、Using Windows Messenger.
• C、Configuring My Network Places.
• D、Using Internet Explorer.

第14题：

A web application uses the HttpSession mechanism to determine if a user is "logged in." When a usersupplies a valid user name and password， an HttpSession is created for that user. The user has access tothe application for only 15 minutes after logging in. The code must determine how long the user has beenlogged in， and if this time is greater than 15 minutes， must destroy the HttpSession. Which method in HttpSession is used to accomplish this？（）

• A、Getcreationtime
• B、Invalidateafter
• C、Getlastaccessedtime
• D、Getmaxinactiveinterval

第15题：

In your database instance， the user sessions are connected to the database server from the remotemachines. You want to achieve the following for these users：  1：The user account must be locked after four unsuccessful login attempts.PASSWORD_LOCK_TIME  2：The user must be prompted to change the password at regular intervals.PASSWORD_LIFE_TIME  3：The user may not have more than three simultaneous sessions.SESSIONS_PER_USER  4：The user session must automatically be logged off if more than 10 minutes elapsed time used.CONNECT_TIME  How would you accomplish the above（）

• A、by assigning profiles for the users
• B、by implementing Fine-Grained Auditing （FGA）
• C、by granting a secure application role to the users
• D、by implementing the Database Resource Manager plan

第16题：

You are developing a Web application. The Web application restricts access to an administrative page. The Web application uses the following code segment to protect the page.if (Page.User.Identity.Name != @"CONTOSO/Administrator") { the page, you are redirected to Login.aspx. You discover that the User.Identity.Name property is not being correctly populated. You need to ensure that you can access the page when you are logged on as Administrator. Which two actions should you perform? （）

• A、In the Web.config file, enable impersonation.
• B、In IIS, enable anonymous access.
• C、In IIS, disable anonymous access.
• D、In the Web.config file, set the authentication mode to Windows.

第17题：

You work as an ASP.NET Web Application Developer for SomeCompany.  The company uses Visual Studio .NET 2010 as its application development platform.You create an ASP.NET Web site using .NET Framework 4.0. Only registered users of the company will be able to use the application. The application holds a page named UserAccount.aspx that enables new users to register them to the registered users„ list of the company. The UserAccount page hold numerous TextBox controls that accept users personal details， such as user name， password， home address， zipcode， phone number， etc.  One of the TextBox controls on the page is named ZipCode in which a user enters a zip code.  You must ensure that when a user submits the UserAccount page， ZipCode must contain five numeric digits.  What will you do to accomplish this？（）

• A、Use RangeValidator.
• B、Use RegularExpressionValidator
• C、Use RequiredValidator
• D、Use CompareValidator
• E、Use RequiredFieldValidator

第18题：

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：