Plan for search engine optimization and accessibility

• Use analytical tools to parse HTML;

• Provide an xml sitemap and robots.txt file to improve scraping;

• Write semantic markup for accessibility, for example, screen readers;

• Use rich snippets to increase content visibility

Plan and implement globalization and localization

• Plan a localization strategy;

• Create and apply resources to UI including JavaScript resources;

• Set cultures and implement server-side localization and globalization

• Design and implement MVC controllers and actions

• Apply authorization attributes, filters (e.g., including global, authentication, and overridden filters);

• Use choose and implement custom HTTP status codes and responses;

• Implement action results;

• Implement MVC areas;

• Implement Dependency Injection for services in controllers;

Design and implement routes

• Define a route to handle a URL pattern;

• Apply route constraints; ignore URL patterns;

• Add custom route parameters and define areas;

• Define routes that interoperate with Single Page Application frameworks such as Angular

Control application behavior by using MVC extensibility points `

• Create custom middleware and inject it into the pipeline;

• Implement MVC filters and controller factories;

• Control application behavior by using action results, model binders, and route handlers;

• Inject services into a view

Design and implement serialization and model binding

• Serialize models and data using supported serialization formats, including JSON, XML, protobuf, and WCF/SOAP;

• Implement model and property binding, including custom binding and model validation;

• Implement web socket communication in MVC

• Implement file uploading and multipart data;

• Use AutoRest to build clients

Prevent and troubleshoot runtime issues

• Troubleshoot performance, security, and errors;

• Implement tracing, logging, and debugging (including IntelliTrace);

• Enable and configure health monitoring (including Performance Monitor));

• Configure and use App Insights runtime telemetry

Design an exception handling strategy

• Handle exceptions across multiple layers; use MVC middleware to configure error handling;

• Use different exception handling strategies for different environments;

• Create and display custom error pages;

• Configure a custom pipeline for error handling;

• Handle first chance exceptions;

• Configure and use App Insights;

• Log application exceptions;

Test a web application

• Create and run unit tests, for example, use the Assert class, create mocks and stubs;

• Create and run web tests including using Browser Link;

• Debug a web application in multiple browsers and mobile emulators;

• Use Azure DevTest Labs; use Visual Studio Team Services

Debug an Azure application

• Collect diagnostic information by using Azure App Insights;

• Choose log types, for example, event logs, performance counters, and crash dumps;

• Stream logs directly to Visual Studio from a deployed site;

• Debug an Azure application by using Visual Studio and remote debugging;

• Interact directly with remote Azure websites using Server Explorer

Configure authentication and Authenticate users

• Enforce authentication settings

• Implement ASP.NET Core Identity and enable Facebook, Google and other external providers;

• Implement account confirmation, password recovery, and multi-factor authentication.

• Perform authentication using Azure Active Directory, Azure Active Directory B2C, Azure Active Directory B2B, and Microsoft Identity manage user session by using cookies;

• Acquire access tokens using the Microsoft Authentication Library (MSAL)

Configure and apply authorization

• Create roles; authorize roles programmatically; configure and work with custom User Stores using middleware; configure controllers and actions to participate in authorization

• Design and implement claims-based authentication

• Perform authentication and authorization using tokens including OpenID, OAuth, JWT, SAML, bearer tokens, etc.

Manage data integrity

• Apply encryption to application data; apply encryption to the configuration sections of an application;

• Sign application data to prevent tampering; secure data using Azure Key Vault;

• Implement encryption for data protection using the data protection APIs in transit and at rest

Implement a Secure Site

• Secure communication by applying SSL certificates

• Require SSL for all requests;

• Enable SSL hosting in the development environment;

• Implement SSL using Azure Load Balancers; salt and hash passwords for storage;

• Use HTML encoding to prevent cross-site scripting attacks (ANTI-XSS Library);

• Implement deferred validation and handle unvalidated requests, for example, form, query string, and URL;

• Prevent SQL injection attacks by

• Parameterizing queries; prevent cross-site request forgeries (XSRF);

• Use Azure Security Center to monitor Azure resources;

• Implement Cross Origin Resource Sharing (CORS)

• Implement protection against open redirect attacks

Candidates for this exam are developers with at least one year of experience programming essential business logic for a variety of application types, hardware, and software platforms using C#.

Exam 70-483: Programming in C#

Implement multithreading and asynchronous processing

• Use the Task Parallel library, including the Parallel. For method, PLINQ, Tasks; create continuation tasks; spawn threads by using Thread Pool; unblock the UI; use async and await keywords; manage data by using concurrent collections

Manage Multithreading

• Synchronize resources; implement locking; cancel a long-running task; implement thread-safe methods to handle race conditions

Implement program flow

• Iterate across collection and array items; program decisions by using switch statements, if/then, and operators; evaluate expressions,

Create and implement events and call-backs

• Create event handlers; subscribe to and unsubscribe from events; use built-in delegate types to create events; create delegates; lambda expressions; anonymous methods

Implement exception handling

• Handle exception types, including SQL exceptions, network exceptions, communication exceptions, network timeout exceptions; use catch statements; use base class of an exception; implement try-catch-finally blocks; throw exceptions; rethrow an exception; create custom exceptions; handle inner exceptions; handle aggregate exceptions

Create types

• Create value types, including structs and enum; create reference types, generic types, constructors, static variables, methods, classes, extension methods; create optional and named parameters; create indexed properties; create overloaded and overridden methods

Consume types

• Box or unbox to convert between value types; cast types; convert types; handle dynamic types; ensure interoperability with unmanaged code that accesses COM APIs

Enforce encapsulation

• Enforce encapsulation by using properties; enforce encapsulation by using accessors, including public, private, protected, and internal; enforce encapsulation by using explicit interface implementation

Create and implement a class hierarchy

• Design and implement an interface; inherit from a base class; create and implement classes based on the IComparable, IEnumerable, IDisposable, and IUnknown interfaces

Find, execute, and create types at runtime by using reflection

• Create and apply attributes; read attributes; generate code at runtime by using Code-Dom and lambda expressions; use types from the System. Reflection namespace, including Assembly, PropertyInfo, MethodInfo, Type

Manage the object life cycle

• Manage unmanaged resources; implement IDisposable, including interaction with finalization; manage IDisposable by using the Using statement; manage finalization and garbage collection

Manipulate strings

• Manipulate strings by using the StringBuilder, StringWriter, and StringReader classes; search strings; enumerate string methods; format strings; use string interpolation

Validate application input

• Validate JSON data; choose the appropriate data collection type; manage data integrity; evaluate a regular expression to validate the input format; use built-in functions to validate data type and content

Perform symmetric and asymmetric encryption

• Choose an appropriate encryption algorithm; manage and create certificates; implement key management; implement the System. Security namespace; hashing data; encrypt streams

Manage assemblies

• Version assemblies; sign assemblies using strong names; implement side-by-side hosting; put an assembly in the global assembly cache; create a Win MD assembly

Debug an application

• Create and manage pre-processor compiler directives; choose an appropriate build type; manage program database files and (debug symbols)

Implement diagnostics in an application

• Implement logging and tracing; profiling applications; create and monitor performance counters; write to the event logs.

Perform I/O operations

• Read and write files and streams; read and write from the network by using classes in the System.Net namespace; implement asynchronous I/O operations

Consume data

• Retrieve data from a database; update data in a database; consume JSON and XML data; retrieve data by using web services

Query and manipulate data and objects by using LINQ

• Query data by using operators, including projection, join, group, take, skip, aggregate; create method-based LINQ queries; query data by using query comprehension syntax; select data by using anonymous types; force execution of a query; read, filter, create, and modify data structures by using LINQ to XML.

Serialize and deserialize data

• Serialize and deserialize data by using binary serialization, custom serialization, XML Serializer, JSON Serializer, and Data Contract Serializer

Store data in and retrieve data from collections

• Store and retrieve data by using dictionaries, arrays, lists, sets, and queues; choose a collection type; initialize a collection; add and remove items from a collection; use typed vs. non-typed collections; implement custom collections; implement collection interfaces.