Secure Exception Handling CASENET Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the main benefit of implementing a centralized exception handling mechanism in an ASP.NET application?

   • AIt ensures that all unhandled exceptions are processed consistently
   • BIt prevents any exception from being thrown in the application
   • CIt automatically fixes the cause of the exception
   • DIt eliminates the need for try-catch blocks in individual methods
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   An ASP.NET MVC application has a custom error page configured for 500 errors. However, when an exception occurs in an AJAX request, the server returns the full HTML of the custom error page, which breaks the client-side JavaScript that expects a JSON response. The team wants to provide a consistent error response for both regular and AJAX requests without leaking details. What should they do?

   • AChange the custom error page to return JSON for all requests.
   • BDetect AJAX requests in the global exception handler and return a JSON error object with a generic message, while returning the HTML error page for normal requests.
   • CConfigure the application to return a 204 No Content response for all errors.
   • DUse the same HTML error page for AJAX requests and update the client-side code to parse the HTML.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A team maintains an ASP.NET MVC application with multiple controllers. Currently, each controller method has its own try-catch block that writes to a different log file and returns different error views. A security audit recommends a consistent, centralized approach to error handling that also prevents sensitive details from reaching users. What should the team implement?

   • AConfigure the web.config to redirect all errors to a static HTML page and disable all logging.
   • BCreate a custom exception filter that logs the exception and returns a generic error view, and register it globally.
   • CAdd a try-catch block to every action method that returns a detailed error view with the exception message.
   • DUse Application_Error in Global.asax to log exceptions, but keep the existing per-controller error views.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   In ASP.NET Core, which component is commonly used to implement centralized exception handling?

   • AGlobal.asax
   • BExceptionHandler middleware
   • CThe Page_Error event
   • DWeb.config customErrors
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   During a code review, a tester triggers an exception in a .NET application and notices that the error page reveals the full stack trace to authenticated users. The team wants to verify that the fix works without affecting the user experience. What is the most effective testing approach?

   • AManually trigger the exception in a browser and confirm that the page looks different from the development error page.
   • BUse a debugger to step through the exception handler and confirm that the stack trace is not assigned to the response.
   • CReview the code to ensure that the catch block logs the exception and shows a generic message.
   • DWrite an automated test that calls the error endpoint and asserts that the response does not contain the exception message or stack trace.
   Reveal Solution Discussion Select an answer first