You are developing a Windows Communication Foundation (WCF) service that returns location information for authorized law enforcement agencies. The service contract is as follows.

Users are authenticated and impersonated. The system uses ASP.NET roles. The members of law enforcement are members of the LawEnforcement role.
You need to ensure that only members of the LawEnforcement role can call these methods.
What are two possible ways to achieve this goal (Each correct answer presents a complete solution? Choose two.)

• A. Add a PrincipalPermissionAttribute to each method that should be available only to members of law enforcement. Set its SecurityAction to Demand and set the role equal to LawEnforcement.
• B. Use the CurrentPrincipal property of the thread. Call the IsInRole method specifying LawEnforcement as a parameter.
• C. Create a GenericPrincipal specifying Thread.CurrentPrincipal.Identity as the IIdentityParameter and LawEnforcement as the only value for the Roles parameter.
• D. At the beginning of each method, enumerate each ClaimSet in a new WindowsClaimSet. Use the FindClaims method to locate a claim type named Role with a right named LawEnforcement.

A Windows Communication Foundation (WCF) service implements a contract with one-way and requestreply operations.
The service is exposed over a TCP transport.
Clients use a router to communicate with the service. The router is implemented as follows. (Line numbers are included for reference only.)
01 ServiceHost host = new ServiceHost(typeof(RoutingService));
02 host AddServiceEndpoint(
03 typeof(lSimplexDatagramRouter),
04 new NetTcpBinding0, "net.tcp:/flocalhostlRouter"
05);
06 List <ServiceEndpoints lep new List <ServiceEndpoint>0;t
07 lep.Add(
08 new ServiceEndpoint(
09 ContractDescription.GetContract(
10 typeof(lSimplexDatagramRouter)
11),
12 new NetTcpBinding0,
13 new EndpointAddress|'nettcp://localhost: 8080/Logger")
14)
15);
16 RoutingConfiguration rc new RoutingConfigurationO;
17 FilterTable.Add(new MatchAilMessageFilterO, lep);
18 host. Description. Behaviors. Add(new RoutingBehavior(rc));
Request-reply operations are failing.
You need to ensure that the router can handle one-way and request-reply operations.
What should you do?

• A. Change line 10 as follows. typeof(lRequestReplyRouter)
• B. Change line 03 as follows. typeof(lDuplexSessionRouter),
• C. Change line 03 as follows. typeof(l RequestReplyRouter),
• D. Change line 10 as follows. typeof(lDuplexSessionRouter)

A Windows Communication Foundation (WCF) service is required to log all authorization attempts to the Windows Event Log.
You need to configure a behavior and apply it to the service to support this requirement.
Which behavior should you configure and apply?

• A. serviceSecurityAudit
• B. serviceCredentials
• C. serviceAuthorization
• D. serviceAuthenticationManager

A Windows Communication Foundation (WCF) solution uses two services to manage a shopping cart. Service
A processes messages containing line items that total between $0 and $500. Service B processes messages containing line items that total more than $500.
All messages are of equal importance to the business logic.
You need to route incoming messages to the appropriate services by using WCF routing.
Which two message filters should you add to the router? (Each correct answer presents part of the solution. Choose two.)

• A. a message filter with a priority of 0 that will forward all messages to Service B
• B. a message filter with a priority of 100 that will forward messages that total between $0 and $500 to Service A
• C. a message filter with a priority of 0 that will forward messages that total between $0 and $500 to Service A
• D. a message filter with a priority of 100 that will forward all messages to Service B

A Windows Communication Foundation (WCF) service handles online order processing for your company.
You discover that many requests are being made with invalid account numbers. You create a class named AccountNumberValidator that has a method named Validate.
Before the message is processed, you need to validate account numbers with AccountNumberValidator and reject messages with invalid account numbers.
You create a new class that implements the IParameterInspector interface. Which code segment should you use in this class?

• A. Public Sub AfterCall(
  ByVal operationName As String,
  ByVal outputs() As Object,
  ByVal returnValue As Object,
  ByVal correlationState As Object) _ Implements
  IParameterInspector.AfterCall
  Dim accountNumber As String = GetAccountNumber(outputs)
  Dim validator As
  AccountNumberValidator = New AccountNumberValidator()
  If (Not validator.Validate(accountNumber)) Then
  Throw New FaultException()
  End If
  End Sub
  Public Function BeforeCall(
  ByVal operationName As String,
  ByVal inputs() As Object) As Object _
  Implements IParameterInspector.BeforeCall
  Return Nothing
  End Function
• B. Public Sub AfterCall(
  ByVal operationName As String,
  ByVal outputs() As Object,
  ByVal returnValue As Object, ByVal correlationState As Object) _ Implements IParameterInspector.AfterCall Dim accountNumber As String = GetAccountNumber(outputs) Dim validator As AccountNumberValidator = New AccountNumberValidator() If (Not validator.Validate(accountNumber)) Then returnValue = New FaultException() End If End Sub Public Function BeforeCall( ByVal operationName As String, ByVal inputs() As Object) As Object _ Implements IParameterInspector.BeforeCall Return Nothing End Function
• C. Public Sub AfterCall(
  ByVal operationName As String,
  ByVal outputs() As Object,
  ByVal returnValue As Object,
  ByVal correlationState As
  Object) _
  Implements IParameterInspector.AfterCall
  Return
  End Sub
  Public Function BeforeCall(
  ByVal operationName As String,
  ByVal inputs() As Object) As Object _
  Implements IParameterInspector.BeforeCall
  Dim accountNumber As String = GetAccountNumber(inputs)
  Dim validator As AccountNumberValidator = New AccountNumberValidator() If (Not
  validator.Validate(accountNumber)) Then
  Throw New FaultException()
  End If
  Return Nothing
  End Function
• D. Public Sub AfterCall(
  ByVal operationName As String,
  ByVal outputs() As Object,
  ByVal returnValue As Object,
  ByVal correlationState As Object) _
  Implements IParameterInspector.AfterCall
  Return
  End Sub
  Public Function BeforeCall(
  ByVal operationName As String,
  ByVal inputs() As Object) As Object _
  Implements IParameterInspector.BeforeCall Dim accountNumber As String =
  GetAccountNumber(inputs)
  Dim validator As AccountNumberValidator =
  New AccountNumberValidator()
  If (Not validator.Validate(accountNumber)) Then
  Return New FaultException()
  End If
  End Function