{"department":null,"description":null,"descriptionStatus":null,"descriptionUpdatedAt":null,"id":"37f39864-075a-4633-b47d-25908ba3604e","label":"ASP","shortDescription":null,"slug":"asp","updatedAt":"2025-08-28T06:53:32.816Z","quizzes":[{"difficulty":"intermediate","id":"EyYt0UNBtb","questionCount":15,"questions":[{"index":0,"options":["Register in any order, but call app.UseRouting() before app.UseEndpoints()","Register exception handling first, then routing, then authentication, then authorization, then endpoints","Order does not matter; ASP.NET Core resolves it automatically","Register endpoints first so routes are defined before middleware executes"],"question":"In ASP.NET Core, what is the correct order for registering middleware components in the Startup.Configure method?","difficulty":"intermediate","explanation":"Middleware executes in the order it is registered, so exception handling must come first to catch errors, followed by routing, authentication, and authorization before endpoints are reached.","correctIndex":1},{"index":1,"options":["Transient","Hosted","Scoped","Singleton"],"question":"When using ASP.NET Core dependency injection, which lifetime should you use for a service that holds user-specific data within a single HTTP request?","difficulty":"intermediate","explanation":"Scoped services are created once per HTTP request, making them ideal for holding user-specific data that should be shared across services within that single request.","correctIndex":2},{"index":2,"options":["To validate that the model state is valid before processing the request","To ensure the request originates from an authenticated session","To prevent unauthorized users from accessing the action method","To prevent cross-site request forgery by requiring a token that malicious sites cannot generate"],"question":"What is the primary purpose of the [ValidateAntiForgeryToken] attribute in ASP.NET Core MVC?","difficulty":"intermediate","explanation":"The ValidateAntiForgeryToken attribute prevents CSRF attacks by requiring a token that the browser automatically sends with forms but that malicious sites cannot obtain or generate.","correctIndex":3},{"index":3,"options":["Using in-memory session state","Using a distributed cache","Using hidden form fields","Using cookies"],"question":"In ASP.NET Core, how does TempData persist data between requests by default?","difficulty":"intermediate","explanation":"By default, ASP.NET Core uses cookie-based TempData provider, which serializes TempData into a cookie that is sent to the client and returned with the next request.","correctIndex":3},{"index":4,"options":["Filters applied via global filter collection","Base controller inheritance","Middleware","Action attributes on each method"],"question":"Which ASP.NET Core feature allows you to apply cross-cutting concerns like logging or authorization to multiple controllers or actions centrally?","difficulty":"intermediate","explanation":"Registering filters in the global filter collection in Startup.ConfigureServices applies them to all controllers and actions, providing a centralized way to handle cross-cutting concerns.","correctIndex":0},{"index":5,"options":["Allows only authenticated cross-origin requests from any domain","Configures the server to ignore all browser security policies","Creates a permissive CORS policy that allows any origin, method, and header but still enforces the CORS protocol","Disables CORS entirely, allowing all requests without restriction"],"question":"When configuring CORS in ASP.NET Core, what does setting the policy to AllowAnyOrigin, AllowAnyMethod, and AllowAnyHeader effectively do?","difficulty":"intermediate","explanation":"This creates a permissive CORS policy that still follows the CORS protocol (sending appropriate headers), but allows any origin, method, and header. It does not disable CORS; it makes it very open.","correctIndex":2},{"index":6,"options":["The property is never included in model binding, preventing users from setting it via form data","The property is always set to its default value during binding","The property cannot be serialized to JSON in API responses","The property is excluded from model validation"],"question":"In ASP.NET Core MVC, what happens when you use [BindNever] on a model property?","difficulty":"intermediate","explanation":"The BindNever attribute prevents the model binder from setting the property from request data, protecting properties like IDs or timestamps from overposting attacks.","correctIndex":0},{"index":7,"options":["Use a single static HttpClient instance for the entire application","Use HttpClient as a singleton service registered in DI","Use IHttpClientFactory to create and manage HttpClient instances","Create a new HttpClient instance for each request and dispose it immediately"],"question":"What is the recommended approach for managing HttpClient instances in ASP.NET Core to avoid socket exhaustion?","difficulty":"intermediate","explanation":"IHttpClientFactory manages the underlying HttpMessageHandler lifecycle, preventing socket exhaustion from creating too many clients while avoiding DNS staleness from using a single static instance.","correctIndex":2},{"index":8,"options":["UseExceptionHandler handles only 500 errors while UseDeveloperExceptionPage handles all HTTP errors","UseExceptionHandler provides a production-safe error handling pipeline, while UseDeveloperExceptionPage shows detailed error information for debugging","UseExceptionHandler logs errors to a database while UseDeveloperExceptionPage logs to the console","They are functionally identical; UseDeveloperExceptionPage is just the newer API"],"question":"In ASP.NET Core, what is the purpose of app.UseExceptionHandler() compared to app.UseDeveloperExceptionPage()?","difficulty":"intermediate","explanation":"UseExceptionHandler creates a production-appropriate error handling pipeline that can redirect to error pages, while UseDeveloperExceptionPage exposes detailed stack traces and diagnostic information meant only for development.","correctIndex":1},{"index":9,"options":["In sessionStorage for tab-scoped access","In a global JavaScript variable","In an HttpOnly cookie to prevent JavaScript access","In localStorage for easy JavaScript access"],"question":"When using ASP.NET Core authentication with JWT bearer tokens, where should you store the token in a browser-based client for best security?","difficulty":"intermediate","explanation":"HttpOnly cookies prevent JavaScript from accessing the token, mitigating XSS attacks. However, using cookies for tokens requires additional CSRF protection measures.","correctIndex":2},{"index":10,"options":["Caches the response in memory on the web server for 60 seconds per user","Caches the response in a distributed cache for 60 seconds","Sets the Cache-Control header to cache the response in the browser for 60 seconds","Caches the response on the server for 60 seconds"],"question":"In ASP.NET Core, what does the [ResponseCache] attribute with Duration=60 and Location=ResponseCacheLocation.Client do?","difficulty":"intermediate","explanation":"The ResponseCache attribute sets the appropriate Cache-Control HTTP header. Location=Client means the cache-control directive tells the browser to cache it, and Duration=60 sets the max-age to 60 seconds.","correctIndex":2},{"index":11,"options":["It defines a route constraint that requires the id parameter to be an integer, and adds this parameter to the page route","It specifies the layout page to use for rendering","It sets the page model property id to an integer type","It creates a query string parameter named id with integer validation"],"question":"In ASP.NET Core Razor Pages, what is the purpose of the @page directive with a route template like '{id:int}'?","difficulty":"intermediate","explanation":"The @page directive with a route template defines the URL route for the page. Adding '{id:int}' creates a route parameter with a constraint that requires the value to be an integer.","correctIndex":0},{"index":12,"options":["ConfigurationManager.ConnectionStrings['DefaultConnection']","AppSettings.GetConnectionString('DefaultConnection')","Configuration.GetSection('ConnectionStrings:DefaultConnection').Get()","IConfiguration.GetConnectionString('DefaultConnection')"],"question":"What is the correct way to read a connection string from appsettings.json in ASP.NET Core?","difficulty":"intermediate","explanation":"GetConnectionString is a convenience method on IConfiguration that reads from the 'ConnectionStrings' section and also resolves environment variable overrides if configured.","correctIndex":3},{"index":13,"options":["They are interchangeable; IHostedService is just the newer pattern","Use IHostedService for long-running background tasks that need proper lifecycle management and graceful shutdown","Use a background Task in a controller for long-running work to keep the request context available","Use IHostedService only for scheduled tasks and background Tasks for everything else"],"question":"In ASP.NET Core, when should you use IHostedService versus a background Task in a controller?","difficulty":"intermediate","explanation":"IHostedService integrates with the ASP.NET Core host lifecycle, ensuring proper startup and graceful shutdown. Background tasks in controllers can be lost if the request ends or the app restarts.","correctIndex":1},{"index":14,"options":["AddControllersWithViews() registers only MVC controllers and views, excluding Razor Pages and other features that AddMvc() includes","They are functionally identical; AddControllersWithViews() is the newer name","AddMvc() only adds API controllers while AddControllersWithViews() adds MVC controllers","AddMvc() is deprecated and should never be used"],"question":"In ASP.NET Core MVC, what is the difference between AddMvc() and AddControllersWithViews() when configuring services?","difficulty":"intermediate","explanation":"AddControllersWithViews() is more targeted, registering only controllers and views without Razor Pages. AddMvc() registers the full set of MVC features including Razor Pages, providing less control over what is included.","correctIndex":0}]},{"difficulty":"advanced","id":"kMJU15u6hj","questionCount":15,"questions":[{"index":0,"options":["Authorization policies are evaluated after the endpoint executes, causing a security bypass","The authorization middleware never executes for matched endpoints, effectively bypassing authorization","Authorization is applied but only for endpoints that return 401 responses","The application throws an InvalidOperationException at startup"],"question":"In ASP.NET Core's request pipeline, what happens when app.UseAuthorization() is placed AFTER app.UseEndpoints()?","difficulty":"advanced","explanation":"When UseEndpoints() is placed before UseAuthorization(), matched endpoints execute without the authorization middleware running, since UseEndpoints() is terminal for matched routes and doesn't call next().","correctIndex":1},{"index":1,"options":["The scoped service is resolved once and behaves as a singleton, potentially causing concurrency issues","The scoped service is correctly resolved per-request through automatic scope creation","The application fails to start with a dependency resolution error","An InvalidOperationException is thrown at runtime when the singleton is resolved"],"question":"In ASP.NET Core dependency injection, what occurs when a Singleton service depends on a Scoped service through constructor injection in a Production environment?","difficulty":"advanced","explanation":"In Production, scope validation (ValidateScopes) is disabled by default, so the captive dependency is allowed. The scoped service is captured by the singleton and resolved only once, behaving as a singleton and potentially causing thread-safety issues.","correctIndex":0},{"index":2,"options":["The IIS application pool recycles due to thread starvation from blocked threads","The garbage collector cannot finalize the Task while the request context is active","The SynchronizationContext blocks the request thread while the continuation waits for the same thread","The Task's continuation is queued to the ThreadPool which becomes exhausted"],"question":"In ASP.NET Framework (not Core), what is the root cause of the classic async deadlock when calling .Result on a Task within a controller action?","difficulty":"advanced","explanation":"ASP.NET Framework's SynchronizationContext ensures continuations run on the original request context. When .Result blocks the request thread, the async continuation cannot post back to that same blocked thread, creating a deadlock.","correctIndex":2},{"index":3,"options":["Both requests succeed but session data becomes corrupted","The second request throws an InvalidOperationException indicating session lock timeout","The second request blocks until the first completes due to session locking","Both requests succeed concurrently; the last write wins"],"question":"In ASP.NET Core, what is the default session behavior when two concurrent requests from the same session attempt to access session data?","difficulty":"advanced","explanation":"ASP.NET Core's session middleware implements session locking by default. When a request accesses the session, it acquires a lock, and concurrent requests from the same session must wait for the lock to be released.","correctIndex":2},{"index":4,"options":["Global first, then controller, then action","Controller first, then global, then action","Action first, then controller, then global","Registration order regardless of scope"],"question":"In ASP.NET Core MVC, when IAsyncActionFilter implementations are registered at global, controller, and action levels without specifying an Order property, what is the execution order for their 'before' logic?","difficulty":"advanced","explanation":"Without explicit Order values, filters execute in scope order for their 'before' logic: global filters first, then controller-level filters, then action-level filters. The 'after' logic executes in reverse order.","correctIndex":0},{"index":5,"options":["The garbage collector triggers compaction when system memory pressure is detected","The cache automatically compacts when the SizeLimit is exceeded, removing least-recently-used entries","Manual calls to Compact() are required for any eviction to occur","Cache entries are evicted when their absolute expiration times are reached"],"question":"When using IMemoryCache with MemoryCacheEntryOptions.SetSize() and a configured SizeLimit, what triggers cache compaction?","difficulty":"advanced","explanation":"When SizeLimit is set and entries use SetSize(), the MemoryCache automatically compacts when the size limit is exceeded. It removes entries based on a least-recently-used algorithm and the CompactionPercentage setting.","correctIndex":1},{"index":6,"options":["It enables URL generation without executing the endpoint","It improves performance by caching route matches between requests","It allows middleware between routing and endpoints to access route data and endpoint metadata before execution","It enables backward compatibility with MVC attribute routing"],"question":"What is the primary architectural benefit of separating app.UseRouting() and app.UseEndpoints() in ASP.NET Core 3.0+?","difficulty":"advanced","explanation":"The separation of UseRouting and UseEndpoints allows middleware placed between them to access routing data and endpoint metadata. This enables authorization middleware to use endpoint-specific policies without executing the endpoint first.","correctIndex":2},{"index":7,"options":["The BackgroundService stops silently; the application continues running","The exception is observed by the IHost, which triggers application shutdown","The exception is logged and the BackgroundService continues from the last checkpoint","The exception is caught and the BackgroundService restarts with exponential backoff"],"question":"In .NET 6+, what is the default behavior when an unhandled exception propagates from a BackgroundService's ExecuteAsync method?","difficulty":"advanced","explanation":"In .NET 6+, when an exception escapes ExecuteAsync, it's observed by the IHost which triggers application shutdown by default. This is a change from earlier versions where the service would stop silently.","correctIndex":1},{"index":8,"options":["Configure antiforgery to use a cookie-token pair, obtain the request token via a dedicated endpoint, and send it as a header","Disable antiforgery for API endpoints since CORS provides equivalent protection against CSRF","Store the token in localStorage and include it as a query string parameter on each request","Include a hidden form field with the token in the SPA's HTML and send it with each request"],"question":"In an ASP.NET Core application serving a SPA, what is the recommended approach for anti-forgery token validation on API requests?","difficulty":"advanced","explanation":"The recommended approach for SPAs is to configure antiforgery with a cookie-token pair, obtain the request token from a dedicated API endpoint, and send it as a header with each AJAX request. This avoids form fields and works naturally with SPA frameworks.","correctIndex":0},{"index":9,"options":["Properties with the [BindNever] attribute are excluded from binding even if they have public setters","Properties without setters can be bound using custom model binders that access backing fields","Properties with private setters are never bound, regardless of their accessibility to the declaring type","Properties with only a getter are bound using reflection to set the backing field directly"],"question":"In ASP.NET Core model binding, which statement about property binding is correct?","difficulty":"advanced","explanation":"The [BindNever] attribute explicitly excludes a property from model binding regardless of setter accessibility. Properties with private setters CAN be bound by the default model binder, and properties without setters cannot be bound at all.","correctIndex":0},{"index":10,"options":["Register the health check as AddTransient and dependencies as scoped","Register the health check using AddHealthChecks().AddCheck() and create a scope within CheckHealthAsync using IServiceProvider","Register the health check as AddSingleton and inject scoped dependencies via constructor injection","Register the health check as AddScoped and dependencies as scoped"],"question":"When implementing IHealthCheck that requires scoped dependencies (like a DbContext), what is the correct registration approach?","difficulty":"advanced","explanation":"Health checks registered with AddCheck() are singletons by default. To use scoped dependencies, you must create a scope within CheckHealthAsync using IServiceProvider, since injecting scoped services into a singleton would create a captive dependency.","correctIndex":1},{"index":11,"options":["QueryStringRequestCultureProvider, CookieRequestCultureProvider, AcceptLanguageHeaderRequestCultureProvider","QueryStringRequestCultureProvider, AcceptLanguageHeaderRequestCultureProvider, CookieRequestCultureProvider","CookieRequestCultureProvider, QueryStringRequestCultureProvider, AcceptLanguageHeaderRequestCultureProvider","AcceptLanguageHeaderRequestCultureProvider, CookieRequestCultureProvider, QueryStringRequestCultureProvider"],"question":"In ASP.NET Core localization, what is the default evaluation order of request culture providers?","difficulty":"advanced","explanation":"The default order prioritizes explicit overrides: QueryStringRequestCultureProvider first (allows per-request override), then CookieRequestCultureProvider (persists user preference), then AcceptLanguageHeaderRequestCultureProvider (browser default).","correctIndex":0},{"index":12,"options":["ResponseCache attribute only sets HTTP response headers; middleware implements server-side response caching","ResponseCache attribute caches on the server; middleware caches on the client","There is no functional difference; they configure the same caching mechanism","ResponseCache attribute implements server-side caching; middleware only sets client-side headers"],"question":"What is the key functional difference between the ResponseCache attribute and Response Caching Middleware in ASP.NET Core?","difficulty":"advanced","explanation":"The ResponseCache attribute only sets HTTP response headers (like Cache-Control) that instruct clients and proxies how to cache. The Response Caching Middleware actually implements server-side caching, storing responses in memory and serving cached responses.","correctIndex":0},{"index":13,"options":["Kestrel's default request body size limit prevents processing of incoming request data","ThreadPool starvation caused by synchronous blocking calls on async endpoints prevents new requests from being processed","The response buffer overflows due to large response payloads exceeding the default buffer size","Kestrel's MaxConcurrentConnections limit prevents new TCP connections from being accepted"],"question":"In a high-traffic ASP.NET Core application using Kestrel, what can cause request processing to stall even when CPU utilization is low?","difficulty":"advanced","explanation":"ThreadPool starvation occurs when synchronous blocking calls (like .Result, .Wait(), or Thread.Sleep) tie up ThreadPool threads. This prevents new requests from being processed even with low CPU usage, since the bottleneck is available threads, not CPU cycles.","correctIndex":1},{"index":14,"options":["Set bindingContext.ModelState.IsValid to false and throw an InvalidOperationException","Return null from BindModelAsync to indicate validation failure","Throw a ValidationException from BindModelAsync to halt request processing","Add ModelError instances to ModelStateDictionary via bindingContext.ModelState.AddModelError() and set Result appropriately"],"question":"When implementing IModelBinder for a complex type, what is the correct way to report validation errors?","difficulty":"advanced","explanation":"To report validation errors from a custom model binder, you should add ModelError instances to the ModelStateDictionary via bindingContext.ModelState.AddModelError(). The framework then handles the validation state appropriately based on the errors added.","correctIndex":3}]},{"difficulty":"beginner","id":"NwgRthCAF3","questionCount":15,"questions":[{"index":0,"options":["Active Scripting Protocol","Advanced Server Programming","Active Server Pages","Application Service Provider"],"question":"What does ASP stand for?","difficulty":"beginner","explanation":"ASP stands for Active Server Pages, which is Microsoft's server-side scripting technology for creating dynamic web pages.","correctIndex":2},{"index":1,"options":["JavaScript","VBScript","C#","Python"],"question":"What is the default scripting language in Classic ASP?","difficulty":"beginner","explanation":"VBScript is the default scripting language in Classic ASP, though JavaScript can also be used by specifying it in the language directive.","correctIndex":1},{"index":2,"options":[".asp",".aspx",".html",".php"],"question":"What file extension is used for Classic Active Server Pages?","difficulty":"beginner","explanation":"Classic ASP files use the .asp extension, while .aspx is used for ASP.NET pages which are a different technology.","correctIndex":0},{"index":3,"options":["","{{ }}","<% %>",""],"question":"Which delimiters are used to enclose server-side ASP code?","difficulty":"beginner","explanation":"ASP uses <% %> delimiters to enclose server-side code blocks that are processed on the server before being sent to the browser.","correctIndex":2},{"index":4,"options":["Session","Server","Request","Response"],"question":"Which ASP built-in object is used to send output to the browser?","difficulty":"beginner","explanation":"The Response object is used to send output, such as HTML text or headers, from the server to the client browser.","correctIndex":3},{"index":5,"options":["Server","Request","Response","Application"],"question":"Which ASP built-in object is used to retrieve information sent by the client?","difficulty":"beginner","explanation":"The Request object is used to retrieve information from the client, including form data, query strings, and cookies.","correctIndex":1},{"index":6,"options":["On the web server","In the database","In the web browser","On the client machine"],"question":"Where is Classic ASP code executed?","difficulty":"beginner","explanation":"Classic ASP code is executed on the web server, and only the resulting HTML output is sent to the client's browser.","correctIndex":0},{"index":7,"options":["Response.Print","Response.Send","Response.Write","Response.Output"],"question":"Which method of the Response object is used to write text output to the browser?","difficulty":"beginner","explanation":"Response.Write is the method used to send text or HTML content from the server to the browser as part of the response.","correctIndex":2},{"index":8,"options":["<%-- expression --%>","<%# expression %>","<%= expression %>","<%@ expression %>"],"question":"What is the shorthand syntax equivalent of Response.Write in ASP?","difficulty":"beginner","explanation":"The <%= %> shorthand syntax is equivalent to Response.Write and is used to quickly output the value of an expression within HTML.","correctIndex":2},{"index":9,"options":["Server","Application","Request","Session"],"question":"Which ASP built-in object is used to store information specific to a single user session?","difficulty":"beginner","explanation":"The Session object stores user-specific information that persists across multiple page requests during a single user's visit.","correctIndex":3},{"index":10,"options":["Session","Response","Application","Request"],"question":"Which ASP built-in object is used to share information among all users of an application?","difficulty":"beginner","explanation":"The Application object stores data that is shared across all users and sessions of the web application.","correctIndex":2},{"index":11,"options":["Apache","Tomcat","IIS (Internet Information Services)","Nginx"],"question":"Which web server is primarily required to run Classic ASP pages?","difficulty":"beginner","explanation":"Classic ASP is a Microsoft technology that runs on IIS (Internet Information Services), Microsoft's web server.","correctIndex":2},{"index":12,"options":["Declare variableName","var variableName","Dim variableName","let variableName"],"question":"What is the correct way to declare a variable in VBScript (ASP's default language)?","difficulty":"beginner","explanation":"In VBScript, the default language for Classic ASP, variables are declared using the Dim keyword.","correctIndex":2},{"index":13,"options":["Server.Transfer","Application.Navigate","Response.Redirect","Request.Forward"],"question":"Which method is used to redirect the user to a different URL in ASP?","difficulty":"beginner","explanation":"Response.Redirect sends an HTTP redirect command to the browser, causing it to navigate to the specified URL.","correctIndex":2},{"index":14,"options":["Inserts the content of the specified file at that location","Creates a hyperlink to another page","Comments out the referenced file","Downloads a file to the client"],"question":"What does the directive do in an ASP page?","difficulty":"beginner","explanation":"The #include directive inserts the entire contents of the specified file into the ASP page at the location of the directive before the page is processed.","correctIndex":0}]}]}

ASP Quiz

Pick your level

Beginner

Intermediate

Advanced