Security Policy for .NET Frameworks
It refers to the logical grouping of code groups and permission sets, containing custom assemblies, that define other types of policies. It provides developers and programmers with flexibility to configure CAS settings at multiple levels, including Enterprise, Machine, User and Application Domain. It is all about control, access, permissions levels for indivdiual applications for example , effectively restricting or allowing what applications can do/or not. All done and used for improved security, controlling code priviledges, by using the Policy classes.
Can describe and guide how security policy defines an assembly permission set, working with operating system security, System.Security.Policy namespace, multiple layers of security gives more flexibility and improved protection, safety, integrity and security levels, depth and peace of mind. Get access through the configuration tools to change and edit settings for security policy. Some of what could be done, would include things like granting permissions to an assembly, Total CAS security levels and permissions, adding a permission set, a code group, increase trust, adjust zone security, reset policy levels, how to acces and use the CAS,or code access security policy tools, (Caspol options), code-groups and permissions set lab exercises. These processes and dynamics assist with CAS administration tasks, monitoring, performance and security, restrictions and permissions levels management. Pay close attention to assembly permissions declarations and what they allow and do not allow, how to create and restrict them. Control permissions for resources, Code priviledges, analyzing evidence and more.
Key Exam Points
- Use VB, C#, adding namespaces, system class libraries, writing to files, streams.
- Review chapters pertaining to application security, as well as installing and configuring Applications, as well as how security policy plays a role, how and what to use it for, what exactly do with it, what to avoid.
- For the exam, study practical, illustrative, lab exercises and examples for .NET Frameworks security policy applications, methods, tips, that help you to gain a better understanding of this topic
- Do the practice test
Related Terms
Code Access Security (CAS)
This article is based on the 2nd edition of the Microsoft .Net Framework Application Training Kit with the purpose to help 70-536 Exam takers to succeed. I constantly look for ways to improve the content. Please leave a comment about this article or drop me a message if you would like to see changes for this site.
