exam questions

Exam 70-486 All Questions

View all questions & answers for the 70-486 exam

Exam 70-486 topic 1 question 175 discussion

Actual exam question from Microsoft's 70-486
Question #: 175
Topic #: 1
[All 70-486 Questions]

You are developing an ASP.NET MVC application. The application uses a SQL Server database and a SQL Server login and password.
You need to ensure that the password for the SQL Server login is not stored in plain text.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. Encrypt the connection string by using aspnet_wp.exe.
  • B. Encrypt the connection string by using aspnet_regiis.exe.
  • C. Ensure that there is a valid encryptionKey element in the web.config file.
  • D. Ensure that there is a valid machineKey element in the web.config file.
Show Suggested Answer Hide Answer
Suggested Answer: BC 🗳️
References:
https://weblogs.asp.net/owscott/421063

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Smartiup
Highly Voted 5 years, 5 months ago
Acording to: https://weblogs.asp.net/owscott/421063 its B and D B - "To encrypt the data, you must use a command line utility called aspnet_regiis.exe which exists in the framework folder. There are two options that work for encryption, -pe and -pef." D - "In theory, in a trusted environment where everyone on the same server trusts each other, you can use the machine key so that everyone can share the key." You could also use a User Key but thats not an option.
upvoted 7 times
...
[Removed]
Highly Voted 5 years, 7 months ago
Correct answer is B,D
upvoted 7 times
ex
5 years, 6 months ago
Disagree. It should be "EncryptedKey" element (not "EncryptionKey" and not "MachineKey"). B, C - looks as almost correct option.
upvoted 6 times
...
...
zimzimzimma
Most Recent 4 years, 11 months ago
You need to use aspnet_regiis.exe and there should be a MachineKey in the web.config. B and D are correct.
upvoted 4 times
...
Jobair
4 years, 11 months ago
According to https://docs.microsoft.com/en-us/previous-versions/aspnet/dtkwfdky(v%3Dvs.100)#encrypting-sections-of-the-webconfig-file It's B & C.
upvoted 2 times
zimzimzimma
4 years, 11 months ago
I accidentally upvoted your comment, but it should be B and D. Your link literally says MachineKey, and not EncryptionKey.
upvoted 8 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...