单选题You are implementing a Web page that displays text that was typed by a user. You need to display the user input in the Web page so that a cross-site scripting attack will be prevented. What should you do？（）A Call document.write.B Call Response.Write.C

第1题：

第2题：

第3题：

You work as a Web Developer at Certkiller.com. You are in the process of creating a Webapplication using Microsoft ASP.NET 3.5.  You create a folder named Dark in the App_Themes folder of the Web application. You also addfour skin files to this folder. You have to make sure that the controls on a page have their appearances overridden by the control definitions defined in the skin files. What should you do？  Which Page directive should you use？（）

• A、You should use the page directive: <%@ Page StyleSheetTheme="App_Themes.Dark"/>
• B、You should use the page directive: <%@ Page Theme="App_Themes.Dark"/>
• C、You should use the page directive: <%@ Page Theme="Dark"/>
• D、You should use the page directive: <%@ Page StyleSheetTheme="Dark"/>

第4题：

You are implementing an ASP.NET Web site that will be accessed by an international audience. The site contains global and local resources for display elements that must be translated into the language that is selected by the user. You need to ensure that the Label control named lblCompany displays text in the user’s selected language from the global resource file. Which control markup should you use？（）

• A、<asp:Label ID="lblCompany" runat="server" meta:resourcekey="lblCompany" />
• B、<asp:Label ID="lblCompany" runat="server" Text="meta:lblCompany.Text" /> 
• C、<asp:Label ID="lblCompany" runat="server" Text="<%$ Resources:lblCompanyText %>" />
• D、<asp:Label ID="lblCompany" runat="server" Text="<%$ Resources:WebResources, lblCompanyText %>" />

第5题：

You are perfoming security testing on an existing asp.net web page.You notice that you are able to issue unauthorised postback requests to the page. You need to prevent unauthorised post back requests. which page directive you use？（）

• A、<%@Page strict = "true" %>  
• B、<%@Page enableViewStateMac = "true" %>
• C、<%@Page EnableEventValidation = "true" %>
• D、<%@Page Aspcompact = "true" %>

第6题：

You write a Web application. This application must support multiple languages. You store the localized strings in the application as resources. You want these resources to be accessed according to a users language preference. You create the following resource files in the App_GlobalResources folder of your application. myStrings.resx myStrings.en-CA.resx myString.en-US.resx myStrings.fr-CA.resx myStrings.es-MX.resxEach resource file stores a localized version of the following strings: Name, E-mail, Address, and Phone. You create a Web Form that contains one label for each of these strings. You need to ensure that the correct localized version of each string is displayed in each label, according to a users language preference. What should you do? （）

• A、Add the following configuration section to the Web.config file.
• B、Set the directive for each page in your site as follows: <%@ page="" uiculture="”Auto”">
• C、Add the following code segment to the pages load event.lblName.Text = @”{myStrings}Name”; lblAddress.Text = @”{myStrings}Address”; lblEmail.Text = @”{myStrings}Email”; lblPhone.Text = @”{myStrings}Phone”;
• D、Add the following code segment to the pages load event.lblName.Text = Resources.myStrings.Name; lblAddress.Text = Resources.myStrings.Address; lblEmail.Text = Resources.myStrings.Email; lblPhone.Text = Resources.myStrings.Phone;

第7题：

You are developing a Web application. The Web application restricts access to an administrative page. The Web application uses the following code segment to protect the page.if (Page.User.Identity.Name != @"CONTOSO/Administrator") { the page, you are redirected to Login.aspx. You discover that the User.Identity.Name property is not being correctly populated. You need to ensure that you can access the page when you are logged on as Administrator. Which two actions should you perform? （）

• A、In the Web.config file, enable impersonation.
• B、In IIS, enable anonymous access.
• C、In IIS, disable anonymous access.
• D、In the Web.config file, set the authentication mode to Windows.

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

第14题：

When you are designing a Web application， which options define how rich text displays in a browser？（）

• A、"Using HTML"
• B、"Using Java Applet"
• C、"Using AJAX Control"
• D、"Using Best Fit for OS"

第15题：

You are implementing an ASP.NET Web page. The page includes several controls， but only a GridView requires view state. You set the GridView… You need to ensure that the page will omit unneeded view state. Wich @ Page directive should you use？（）

• A、<% Page EnableViewState=”true” ViewStateMode=”Enabled” _ %>
• B、<% Page EnableViewState=”true” ViewStateMode=”Disabled” _ %>
• C、<% Page EnableViewState=”false” ViewStateMode=”Disabled” _ %>
• D、<% Page EnableViewState=”false” ViewStateMode=”Enabled” _ %>

第16题：

You are implementing a Web page that displays text that was typed by a user. You need to display the user input in the Web page so that a cross-site scripting attack will be prevented. What should you do？（）

• A、Call document.write.
• B、Call Response.Write.
• C、Call HttpUtility.UrlEncode.
• D、Call HttpUtility.HtmlEncode.

第17题：

You are testing an existing ASP.NET page. The page includes a text box. You are able to execute malicious JavaScript code by typing it in the text box and submitting. You need to configure the page to prevent JavaScript code from being submitted by the text box. In the @ Page directive， which attribute should you set to true？（）

• A、the EnableEventValidation attribute
• B、the ResponseEncoding attribute
• C、the ValidateRequest attribute
• D、the Strict attribute

第18题：

You write a Web application. This application must support multiple languages. You store the localized strings in the application as resources. You want these resources to be accessed according to a users language preference. You create the following resource files in the App_GlobalResources folder of your application.myStrings.resxmyStrings.enCA.resxmyString.en-US.resxmyStrings.fr-CA.resxmyStrings.es-MX.resx resource file stores a localized version of the following strings: Name, E-mail, Address, and Phone. You create a Web Form that contains one label for each of these strings. You need to ensure that the correct localized version of each string is displayed in each label, according to a users language preference. What should you do? （）

• A、Add the following configuration section to the Web.config file.
• B、Set the directive for each page in your site as follows:<%@ page="" uiculture="“Auto”">
• C、Add the following code segment to the pages load event.lblName.Text = @”{myStrings}Name”; lblAddress.Text = @”{myStrings}Address”; lblEmail.Text = @”{myStrings}Email”; lblPhone.Text = @”{myStrings}Phone”;
• D、Add the following code segment to the pages load event. lblName.Text = Resources.myStrings.Name; lblAddress.Text = Resources.myStrings.Address; lblEmail.Text = Resources.myStrings.Email; lblPhone.Text = Resources.myStrings.Phone;

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：