Continuous _________ is a software development practice where changes in the code are automatically tested and prepared for a release to production.
- Integration
- Deployment
- Testing
- Delivery
Continuous Delivery is a software development practice where changes are automatically tested and prepared for release to production. It includes automated testing, deployment, and delivery of code changes.
For a Web API, you're required to ensure that only authenticated users can access specific endpoints, but some endpoints should be public. How would you achieve this in ASP.NET Core?
- Use Authentication Filters
- Use Authorization Filters
- Configure Middleware
- Use Role-Based Authorization
To control access to specific endpoints in an ASP.NET Core Web API, you'd use Authorization Filters. You can apply policies to controllers or actions, and these filters can determine whether a user is authorized to access the resource based on their identity and role. To make some endpoints public, you can use AllowAnonymous attribute or configure policies accordingly.
What is the primary difference between the _ViewImports.cshtml and _ViewStart.cshtml files in Razor?
- _ViewImports.cshtml sets directives and namespaces
- _ViewStart.cshtml sets layout and common code
- They serve the same purpose
- _ViewStart.cshtml sets routing rules
The primary difference between _ViewImports.cshtml and _ViewStart.cshtml in Razor is their purpose. _ViewImports.cshtml is used to set directives, namespaces, and base class declarations for views, whereas _ViewStart.cshtml is used to specify common layout code and execute code before rendering views. _ViewStart.cshtml is typically used to set layout and execute code that should apply globally to multiple views.
When securing your ASP.NET Core Web APIs, which authentication approach uses a compact, URL-safe means of representing claims to be transferred between two parties?
- OAuth 2.0
- JSON Web Tokens (JWT)
- SAML (Security Assertion Markup Language)
- OpenID Connect
JSON Web Tokens (JWT) is an authentication approach commonly used in ASP.NET Core Web APIs. JWTs are compact and URL-safe, making them efficient for transferring claims between parties. They provide a secure way to represent user identities and access permissions.
You're building a simple website using ASP.NET Core. You want to display a friendly error page when something goes wrong in your application. What's the standard way to do this in ASP.NET Core?
- Custom Error Page
- Detailed Logging
- Exception Handling Middleware
- Using Console.WriteLine()
The standard way to display a friendly error page in ASP.NET Core is by using Exception Handling Middleware. This middleware captures unhandled exceptions and can be configured to display custom error pages, making it easier for users to understand what went wrong.
In a project where user registration is done programmatically, you want to ensure that users have a strong password and are locked out after 5 incorrect login attempts. Which class should you configure to enforce these rules?
- IdentityUser
- IdentityRole
- PasswordHasher
- IdentityOptions
To enforce password strength rules and configure account lockout settings, you should configure the IdentityOptions class. This class allows you to set various security-related options, including password complexity requirements and account lockout thresholds.
Which Razor directive is typically used at the beginning of a view file to specify its layout page?
- @layout
- @page
- @model
- @section
The @layout Razor directive is used at the beginning of a view file to specify its layout page in ASP.NET Core MVC. It allows you to define the layout that should be applied to the current view, providing a consistent structure for your web pages.
Your team is implementing a Continuous Integration (CI) pipeline for an ASP.NET Core application. What is the main reason for integrating automated tests into this CI pipeline?
- Ensure Code Quality
- Speed Up Deployment
- Reduce Server Costs
- Simplify Documentation
The main reason for integrating automated tests into a CI pipeline is to ensure code quality. Automated tests help catch bugs early in the development process, improve the reliability of the application, and provide confidence that changes won't introduce regressions. This ultimately leads to a higher-quality product.
Which file extension is typically used to define shared Razor directives that can be utilized across multiple views?
- .cshtml
- .layout
- .razordirectives
- .razorimports
The file extension typically used to define shared Razor directives that can be utilized across multiple views is .razorimports. This file allows you to specify common directives or 'using' statements that should apply to multiple Razor views, streamlining your code and maintaining consistency.
Which of the following best describes a primary feature of ASP.NET Core Identity?
- User Registration and Management
- Image Compression
- Video Editing
- Network Routing
A primary feature of ASP.NET Core Identity is user registration and management. It allows you to create, update, and manage user accounts, including features like user registration, login, password reset, and role-based access control (RBAC).