You are developing a Windows Communication Foundation (WCF) service. One of the parameters used with the service operations is a security token. The security token is not sensitive. The monitoring software tracks security tokens and can read tokens in clear text only.
The company security policy requires that you validate all clear text data passed over the corporate network.
You need to ensure that the service verifies that the security token is not changed during transit.
What should you do?

• A. Implement IEndpointldentityProvider in the message contract class.
• B. For all the security-sensitive members, set the ProtectionLevel parameter of the MessageBodyMember or MessageHeader attribute to EncryptAndSign.
• C. Implement ISecureConversationSession in the message contract class.
• D. For all the security-sensitive members, set the ProtectionLevel parameter of the MessageBodyMember or MessageHeader attribute to Sign.

Your Windows Communication Foundation (WCF) client application uses HTTP to communicate with the service.
You need to enable message logging and include all security information such as tokens and nonces in logged messages.
What should you do?

• A. In the application configuration file, add the following XML segment to the
  system.serviceModel configuration section group.
  <diagnostics>
  <messageLogging logMessagesAtTransportLevel="true"
  logEntireMessage="true" />
  </diagnostics>
• B. In the machine configuration file, add the following XML segment to the
  system.serviceModel configuration section.
  <machineSettings enableLoggingKnownPii="true" />
  In the application configuration file, add the logKnownPii attribute to the message logging
  diagnostics source and set the value of the attribute to true. In the application configuration
  file, add the following XML segment to the system.serviceModel configuration section
  group.
  <diagnostics>
  <messageLogging logMessagesAtTransportLevel="true"/>
  </diagnostics>
• C. In the application configuration file, add the logKnownPii attribute to the message
  logging diagnostics source and set the value of the attribute to true.
  Generate the ContosoService class using the Add Service Reference wizard. Add a
  reference to System.ServiceModel.Routing.dll.
  Add the following code segment.
  ContosoService client = new ContosoService();
  SoapProcessingBehavior behavior = new SoapProcessingBehavior();
  behavior.ProcessMessages = true;
  client.Endpoint.Behaviors.Add(behavior);
• D. In the machine configuration file, add the following XML segment to the
  system.serviceModel configuration section.
  <machineSettings enableLoggingKnownPii="true" />
  Generate the ContosoService class using the Add Service Reference wizard.
  Add the following code segment.
  ContosoService client = new ContosoService();
  client.Endpoint.Behaviors.Add(new CallbackDebugBehavior(true));

A service implements the following contract. (Line numbers are included for reference only.)

The service is implemented as follows.

ContosoService uses NetMsmqBinding to listen for messages. The queue was set up to use transactions for adding and removing messages.
You need to ensure that OperationOne and OperationTwo execute under the same transaction context when they are invoked in the same session.
What should you do?

• A. Insert the following attribute to OperationOne on ContosoService.
  [OperationBehavior(TransactionScopeRequired = true,
  TransactionAutoComplete = false)]
  Insert the following attribute to OperationTwo on ContosoService.
  [OperationBehavior(TransactionScopeRequired = true, TransactionAutoComplete = true)]
• B. Add the following XML segment to the application config file in the
  system.serviceModel/bindings configuration section.
  <netMsmqBinding>
  <binding name="contosoTx" durable="true" receiveContextEnabled="true" />
  </netMsmqBinding>
  Then use the NetMsmqBinding named contosoTx to listen for messages from the clients.
• C. Add the following XML segment to the application config file in the
  system.serviceModel/bindings configuration section.
  <customBinding>
  <binding name="contosoTx">
  <transactionFlow />
  <binaryMessageEncoding />
  <msmqTransport durable="true" />
  </binding>
  </customBinding>
  Then use the CustomBinding named contosoTx to listen for messages from the clients.
• D. Insert the following attribute to OperationOne on IContosoService.
  [TransactionFlow(TransactionFlowOption.Mandatory)]
  Insert the following attribute to OperationTwo on IContosoService.
  [TransactionFlow(TransactionFlowOption.Mandatory)]

You are configuring services to be discoverable. The services must be discoverable without relying on a central server. Client applications that consume the services are on a network segment that is separate from the network segment that the services are located on.
A firewall blocks all TCP ports between the two network segments, but allows other protocols to pass through.
You need to ensure that the client applications can discover the services.
What should you do?

• A. Use ad-hoc discovery mode over HTTP.
• B. Use ad-hoc discovery mode over UDP.
• C. Use managed discovery mode over HTTP.
• D. Use managed discovery mode over UDP.

You are creating an ASP NET web application that hosts several Windows Communication Foundation (WCF) services the services have ASP.NET Compatibility Mode enabled.
Users authenticate with the Web application by using a cookie-based ASR NET Forms Authentication model. You add a service tile named Authentication. svc that contains the following code segment
<%@ SenviceHost Servicee"System
Web Application Services Authentication Service"Factory="System.Web.ApplicationServices.AppicationServicesHostFactory' %>.
You need to ensure that users can access the WCF services without having to re-authenticate.
Which two configuration settings should you add? (Each is part of a complete solution. Choose two.)

• A. In the system web.extensions/scripting/webServices/authenticationService element, set the enabled attribute to true.
• B. Add a service endpoint with basicHttpBinding for the contract System.WebApplicationServices.AuthenticationService.
• C. In the system web.extensions/scripting/webServices/profileService element, set the enabled attribute to true.
• D. Add a custom service behavior named AuthenticationServiceTypeBehaviors with a serviceAuthenticationManager element that has serviceAuthenticationManagerType set to System Web Security. SQL Membership Provider