HOTSPOT - (Topic 2)
You are developing a Universal Windows Platform (UWP) app that stores credentials by using the Credential Locker service.
You need to securely retrieve credentials for the current user.
How should you complete the method? To answer, select the appropriate code segment from each list in the answer area.
Solution:
Box 1: Example:
var vault = new Windows.Security.Credentials.PasswordVault();
Box 2:
Example continued:
// When there are multiple usernames,
// retrieve the default username. If one doesn't
// exist, then display UI to have the user select
// a default username.
defaultUserName = GetDefaultUserNameUI();
credential = vault.Retrieve(resourceName, defaultUserName);
Does this meet the goal?
Correct Answer:
A
DRAG DROP - (Topic 2)
You are creating a Universal Windows Platform (UWP) app that takes pictures. You want to use the camera’s built-in interface for taking the pictures.
You need to capture an image from the device’s built-in camera.
How should you complete the method? To answer, drag the appropriate code segments to the correct location or locations. Each code segments may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Solution:
Box 1: CameraCaptureUI
Box 2: CameraCaptureUI
Example: Using Windows.Media.Capture.CameraCaptureUI API to capture a photo CameraCaptureUI dialog = new CameraCaptureUI();
Size aspectRatio = new Size(16, 9); dialog.PhotoSettings.CroppedAspectRatio = aspectRatio;
StorageFile file = await dialog.CaptureFileAsync(CameraCaptureUIMode.Photo);
Does this meet the goal?
Correct Answer:
A
- (Topic 2)
You have to connect your app to an online identity provider that uses OAuth authentication protocol.
The app must securely use the WebAuthenticationBroker object for authentication. You need to ensure that the app registers with the provider.
Which two actions should you perform? Each correct answer presents part of the solution.
Correct Answer:
CD
The current application callback URI is used as an implicit value of the callbackUri parameter of the AuthenticateAsync method. However, applications need the URI value to add it to the request URI as required by the online provider.
The requestUri parameter must be a HTTPS address: an exception will be thrown if an HTTP address is used, even for local testing scenarios.
- (Topic 4)
You need to configure authentication for the app.
Which two technologies should you use? Each correct answer presents part of the solution.
Correct Answer:
AD
Microsoft Hello
Microsoft Hello provides simple multi-factor authentication using facial recognition (or iris, or fingerprints) that is used to access the Microsoft Passport private key stored in the secure TPM chip. For the first time, Microsoft has included the biometric software (middleware) in Windows 10 to support biometrics for authentication. In previous versions of Windows, the OEM (HP, Dell, Lenovo, etc) needed to add its own biometric middleware to support biometric authentication.
From scenario: The app must meet the following requirements related to security: Note: Microsoft Passport
Microsoft has resurrected the Passport moniker for a new PKI credential system that
requires multi-factor authentication. Most interesting about Microsoft Passport is that it fully supports the Fast IDentity Online (FIDO) Alliance standards which means it will work with many web/cloud services without modification. The plan is that users of cloud services supporting FIDO is that there will no longer be passwords associated with the user’s account.
Microsoft Passport involves a user logging onto the Windows 10 computer with multi-factor (PIN, face, iris, fingerprint, etc) and either creating a new account or associating an existing account with an IDentity Provider (IDP). Windows generates a public/private key pair with the private key stored securely outside of the Windows 10 OS. The public key is associated with the account so that a challenge can be sent that can only correctly respond to the IDP. Another key point to the Microsoft Passport credential system is that the user needs to enroll every device used to access the service (IDP).
DRAG DROP - (Topic 2)
You are developing a Universal Windows Platform (UWP) app that needs to run on multiple types of devices.
The app must detect whether a device has a physical camera button.
For devices that have a physical camera button, you need to ensure that the app continues to function.
How should you complete the code? To answer, drag the appropriate code segments to the correct location or locations. Each code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Solution:
Box 1: Windows.Phone.UI.Input
Box 2: ApiInformation
Box 3: IsTypePresent
Box 4: HardwareButtons
You could check and see if the backbutton is present to see if it is a mobile device
bool isHardwareButtonsAPIPresent = Windows.Foundation.Metadata.ApiInformation.IsTypePresent("Windows.Phone.UI.Input.H ardwareButtons")
Does this meet the goal?
Correct Answer:
A
