A Windows Communication Foundation (WCF) service that handles corporate accounting must be changed to comply with government regulations of auditing and accountability. You need to configure the WCF service to execute under the Windows logged-on identity of the calling application.What should you do?（）

单项选择题You are developing a Windows Communication Foundation (WCF) service. The service needs to access out-of-process resources.You need to ensure that the service accesses these resources on behalf of the originating caller. What should you do?（）

A. Set the value of ServiceSecurityContext.Current.WindowsIdentity.ImpersonationLevel to TokenlmpersonationLevel.Impersonation
B. Set the value of ServiceSecurityContext.Current.Windowsldentity.ImpersonationLevel to TokenlmpersonationLevel.Delegation
C. Set the PrincipalPermissionAttribute on the service contract and update the binding attribute in the endpoint element of the configuration file to wsHttpBinding
D. Set the PnncipalPermissionAttribute on the service contract and update the bindingConfiguration attribute in the endpoint element of the configuration file to wsHttpBinding

单项选择题You are creating a Windows Communication Foundation (WCF) service that implements the following service contract.[ServiceContract]public interface IOrderProcessing { [OperationContract] void ApproveOrder(int id);}You need to ensure that only users with the Manager role can call the ApproveOrder method. What should you do?（）

A. In the method body, check the Rights PosessesProperty property to see if it contains Manager
B. Add a PrincipalPermission attribute to the method and set the Roles property to Manager
C. Add a SecurityPermission attribute to the method and set the SecurityAction to Demand
D. In the method body, create a new instance of WindowsClaimSet. Use the FindClaims method to locate a claimType named Role with a right named Manager

单项选择题A Windows Communication Foundation (WCF) client uses the following service contract.(Line numbers are included for reference only.) 01 [ServiceContract] 02 public interface IService 03 { 04 [OperationContract] 05 string Operation1(); 06 [OperationContract] 07 string Operation2(); 08 } You need to ensure that all calls to Operation1 and Operation2 from the client are encrypted and signed. What should you do?（）

A. Set the ProtectionLevel property in line 01 to EncryptAndSign.
B. Set the ProtectionLevel property in line 04 and line 06 to Sign.
C. Add a SecurityCriticalAttribute ror each operation.
D. Add a SecunitySafeCriticalAttribute for each operation.

单项选择题You are creating a Windows Communication Foundation (WCF) service that accepts messages from clients when they are started. The message is defined as follows:[MessageContract] public class Agent { public string CodeName { get; set; } public string SecretHandshake { get; set; }}You have the following requirements: The CodeName property must be sent in clear text. The service must be able to verify that the property value was not changed after being sent by the client. The SecretHandshake property must not be sent in clear text and must be readable by the service.What should you do?（）

A. Add a MessageBodyMember attribute to the CodeName property and set the ProtectionLevel to Sign. Add a MessageBodyMember attribute to the SecretHandshake property and set the ProtectionLevel to EncryptAndSign.
B. Add a DataProtectionPermission attribute to the each property and set the ProtectData property to true.
C. Add an xmlText attribute to the CodeName property and set the DataType property to Signed. Add a PasswordPropertyText attribute to the SecretHandshake property and set its value to true.
D. Add an ImmutableObject attribute to the CodeName property and set its value property to true. Add a Browsable attribute to the SecretHandshake property and set its value to false.

单项选择题You are creating a Windows Communication Foundation (WCF) service to process orders.The data contract for the order is defined as follows:[DataContract]public class Order{ [DataMember] public string CardHolderName { get; set; } [DataMember] public string CreditCardNumber { get; set; }}You have the following requirements: Enable the transmission of the contents of Order from the clients to the service. Ensure that the contents of CreditCardNumber are not sent across the network in clear text. Ensure that the contents of CreditCardNumber are accessible by the service to process the order.You need to implement the service to meet these requirements. What should you do?（）

A. Add a DataProtectionPermission attribute to the CreditCardNumber property and set the ProtectData property to true.
B. Convert the DataContract to a MessageContract and set the ProtectionLevel property to SignAndEncrypt.
C. Change the data type of CreditCardNumber from string to SecureString.
D. Implement the CreditCardNumber property getter and setter In the setter, run the value of the CreditCardNumber through the MD5CryptoServiceProvider class TransformBlock method.