单选题You want to create a role to meet these requirements： 1. The role is to be protected from unauthorized usage. 2. The password of the role is not to be embedded in the application source code or stored in a table. method would you use to restrict enabli

第1题：

You are evaluating a Windows Azure application. The application uses one instance of a web role. The role instance size is set to Medium. The application does not use SQL Azure.   You have the following requirements for scaling the application：   - Maximize throughput.  - Minimize downtime while scaling. - Increase system resources.   You need to recommend an approach for scaling the application.  What should you recommend？（）  

• A、 Set up vertical partitioning.
• B、 Set up horizontal partitioning.
• C、 Increase the number of role instances.
• D、 Change the role instance size to large.

第2题：

You have the following requirements：   - Ensure that the business tier can be updated without affecting the application tier.   - Use the minimum role instance size that meets or exceeds the current server specifications.    You need to recommend a topology for hosting the application in Windows Azure.  What should you recommend？（）

• A、 Deploy the application tier and the business tier to one role with two Medium instances.
• B、 Deploy the application tier and the business tier to one role with two Large instances.
• C、 Deploy the application tier role to a Medium instance.  Deploy the business tier role to a medium instance.
• D、 Deploy the application tier role to a Large instance.  Deploy the business tier role to a Large instance.

第3题：

第4题：

You want to create a role to meet these requirements：  1：The role is to be protected from unauthorized usage.  2：The password of the role is not to be embedded in the application source code or stored in a table.  Which method would you use to restrict enabling of such roles（）

• A、Create the role with global authentication.
• B、Create the role with external authentication.
• C、Create the role as a secure application role.
• D、Create the role as a password-protected role.
• E、Create a role and use Fine-Grained Access Control （FGAC） to secure the role.

第5题：

You are designing a Windows Azure application.  The application includes two web roles and three instances of a worker role.  The web roles will send requests to the worker role through one or more Windows Azure Queues. You have the following requirements：   - Ensure that each request is processed exactly one time.   - Minimize the idle time of each worker role instance. - Maximize the reliability of request processing.   You need to recommend a queue design for sending requests to the worker role.  What should you recommend？（）

• A、 Create a single queue.  Send requests on the single queue.
• B、 Create a queue for each web role.  Send requests on all queues at the same time.
• C、 Create a queue for each workerrole instance.  Send requests on each worker queue in a round robin.
• D、 Create a queue for each combination of web roles and worker role instances.  Send requests to all worker role instances based on the sending web role.

第6题：

You are developing an application that uses role-based security. The prinicipal policy of the application domain is configured during startup with the following code：AppDomain.CurrentDomain.SetPrincipalPolicy（PrincipalPolicy.WindowsPrincipal）；  You need to restrict access to one of the methods in your application so that only members of the local Administrators group can call the method. Which attribute should you place on the method？（）

• A、 [PrincipalPermission （SecurityAction.Demand， Name = @"BUILTIN/Administrators"）]
• B、 [PrincipalPermission （SecurityAction.Demand， Role = @"BUILTIN/Administrators"）]
• C、 [PrincipalPermission （SecurityAction.Assert， Name = @"BUILTIN/Administrators"）]
• D、 [PrincipalPermission （SecurityAction.Assert， Role = @"BUILTIN/Administrators"）]

第7题：

You work as an application developer at Contoso.com. You use Microsoft .NET Framework 3.5 and Microsoft ADO.NET to develop an application. The user name and password that is kept by the connection string is stored directly in the code of the application. You want to make sure that the password in the connection string is as protected.   What should you do？ （）

• A、 Add the connection string to the Settings.settings file.
• B、 Add connection string to the Web.config file and use protected configuration.
• C、 Use the TRUE setting in the Persist Security Info keyword.
• D、 Use the FALSE setting in the Persist Security Info keyword

第8题：

第9题：

You want to restrict access to a role based on the client machine from which the user is accessing the network.Which two role restrictions accomplish this goal? （）

• A、user name
• B、password length
• C、certificate
• D、Host Checker

第10题：

You want to create a role to meet these requirements： 1. The role is to be protected from unauthorized usage. 2. The password of the role is not to be embedded in the application source code or stored in a table. method would you use to restrict enabling of such roles（）

• A、Create the role with external authentication.
• B、Create the role as a secure application role.
• C、Create the role as a password-protected role.
• D、Create a role and use Fine-Grained Access Control （FGAC） to secure the role