Workshop

IOTA^_^

---

	Sams Teach Yourself ASP.NET in 21 Days, Second Edition By Chris Payne
	Table of Contents
	Day 21.  Securing Your ASP.NET Applications

---

This workshop will help reinforce the concepts covered in today's lesson. The answers can be found in Appendix A.

Quiz

1:	What's the difference between authentication and authorization?
2:	What's the difference between basic and digest authentication?
3:	What's the anonymous user account's name in Windows?
4:	Write some code to set an authorization cookie and redirect to an originating URL.
5:	What does the second parameter in the SetAuthCookie method do?
6:	Will the following code work? <configuration> <authentication mode="Forms"> <forms name="AuthCookie" loginUrl="day21/login.aspx"> </forms> </authentication> </configuration>
7:	What do the wildcard characters * and ? mean to ASP.NET within the authorization section of web.config?
8:	True or False: When impersonation is enabled, ASP.NET can operate on behalf of the operating system.

Exercise

[click here]

Create a login page that validates user credentials against a database. Create a web.config file that uses forms authentication and directs all anonymous users to this login page.

---

IOTA^_^

Top