70-488 Developing Microsoft Sharepoint Server 2013 Core Solutions Practice Questions
Prepare for 70-488 with more than an answer.
- Exam fee
- $165 USD
- Level
- Professional
- Valid for
- N/A (MCSD certification was permanent but exam retired)
Domains covered on the exam 7
- Plan and Design SharePoint Sites
- Implement Authorization and Authentication
- Access and Manage Data
- Implement SharePoint Solutions
- Implement the User Experience and Information Architecture
- Create Business Processes
- Create Office Apps
- 1
You have a SharePoint list with a 'Status' choice field. You need to implement a synchronous
ItemUpdatingevent receiver. The event receiver must prevent users from changing the status from 'Approved' to any other value. If a user attempts this change, the update must be cancelled and an error message displayed. Which property of theSPItemEventPropertiesobject should be set to achieve this?Show answer details
Correct answer: B
In a synchronous 'before' event like
ItemUpdating, settingproperties.Status = SPEventReceiverStatus.CancelWithErrorcancels the current action (the item update). Theproperties.ErrorMessageshould also be set to display a user-friendly message.AfterPropertiesis used to inspect the proposed changes, not to cancel the event.Cancelis a boolean that doesn't display an error, andRedirectUrlis for redirection. - 2
A developer has built a provider-hosted SharePoint app. The app needs to display the current SharePoint user's profile picture and job title. To optimize performance and reduce network latency, the developer decides to use the SharePoint REST API's
$selectquery option. Which of the following REST API endpoints is the most efficient for retrieving only the required information?Show answer details
Correct answer: C
The
/_api/web/currentuserendpoint provides basic user information. By appending the OData$selectquery option with the desired properties (PictureUrl,Title), you instruct SharePoint to return only that data, minimizing the payload size and improving efficiency. While thePeopleManagerAPI is more comprehensive for user profiles, it's overkill for this simple requirement, and the basiccurrentuserendpoint is more direct. - 3
You are designing a custom navigation solution for a SharePoint 2013 site collection that has a deep and frequently changing site structure. The business requires that the global navigation menu reflects a specific business taxonomy stored in the Managed Metadata term store, rather than the site hierarchy. The solution must also support friendly URLs. Which navigation type should you configure in the site's Navigation Settings?
Show answer details
Correct answer: B
Managed Navigation is the feature specifically designed to use a term set from the Managed Metadata Service to drive a site's navigation. It decouples the navigation from the site structure, allows for friendly URLs, and is ideal for scenarios where navigation should reflect a business taxonomy. Structural Navigation is based on the physical site and subsite hierarchy.
- 4
True or False: In a SharePoint 2013 provider-hosted app using the low-trust model, the
TokenHelper.csfile is responsible for validating the context token and retrieving a new access token from Azure Access Control Service (ACS).Show answer details
Correct answer: A
True. The
TokenHelperclass, provided by the Office Developer Tools for Visual Studio, is the cornerstone of the low-trust authentication flow. It contains methods likeGetContextTokenFromRequestandGetAccessTokenwhich handle the complex OAuth 2.0 interactions with SharePoint and Azure ACS, including validating tokens and exchanging them for access tokens. - 5
You are working on a SharePoint 2013 project where the term store is used extensively for metadata tagging and navigation. You need to programmatically add a new term to an existing term set using the server-side object model (SSOM). Which sequence of objects must you instantiate to access the target term set?
graph TD A[TaxonomySession] --> B[TermStore] B --> C[Group] C --> D[TermSet] D --> E[Term]Show answer details
Correct answer: C
The correct hierarchy for accessing a term set programmatically via SSOM is to first get a
TaxonomySessionfor the current site, then get the specificTermStore, find the correctGroupwithin the term store, and finally get the targetTermSetfrom that group. From theTermSetobject, you can then create new terms. - 6
A financial services firm is deploying a SharePoint 2013 farm solution that includes a custom timer job. This timer job must process sensitive data from a specific content database associated with the 'secure.contoso.com' web application only. The solution must ensure the timer job logic does not execute on any other web application's content databases to maintain strict data segregation. Which property of the SPJobDefinition class must be set to achieve this requirement?
Show answer details
Correct answer: B
The
WebApplicationproperty of theSPJobDefinitionclass scopes the timer job to a specific web application. When this property is set, the timer job will only run against the content databases attached to that web application, fulfilling the security and data segregation requirement.LockTypecontrols concurrency,Serverscopes it to a specific server, andServiceassociates it with a service, none of which restrict it to a single web application's data. - 7
A developer created a provider-hosted app for SharePoint 2013 that uses the server-to-server (S2S) protocol for high-trust authentication. During testing, the app fails with an 'invalid actor' error when attempting to access SharePoint data. The app is registered using
AppRegNew.aspx, and the STS certificate has been correctly configured on both the SharePoint and remote web server. What is the most likely cause of this error?Show answer details
Correct answer: C
In a high-trust S2S scenario, the
ClientIdin the app's configuration must be the same GUID as theIssuerIdconfigured for the trusted security token issuer in SharePoint (created viaNew-SPTrustedSecurityTokenIssuer). The 'invalid actor' error specifically indicates a mismatch in the issuer ID, meaning SharePoint does not trust the source of the token. App permissions would cause an 'access denied' error, and an expired token would result in a different authentication failure. - 8
You are developing a sandboxed solution that includes a Visual Web Part. This web part needs to display data from an external system. Direct calls to the external system's web service are blocked by the sandboxed code service. You must enable the web part to securely retrieve this data with minimal changes to the existing sandboxed solution structure. Which two of the following components should be implemented to achieve this? (Select TWO)
Show answer details
Correct answer: B, D
A full-trust proxy is the standard pattern for allowing sandboxed solutions to execute privileged code. This involves creating a farm solution with a class that inherits from
SPProxyOperationto contain the full-trust code that calls the external service.From the sandboxed solution, the
SPUtility.ExecuteRegisteredProxyOperationmethod is used to invoke the full-trust proxy operation deployed in the farm solution, passing any required arguments and receiving the results. - 9
A developer needs to create a SharePoint-hosted app that displays a list of high-value sales opportunities from a list named 'Opportunities'. For performance reasons, the app must only retrieve the 'Title', 'Value', and 'SalesOwner' fields for items where the 'Status' field is 'Active'. Which JSOM (JavaScript Object Model) code snippet correctly and most efficiently implements this data retrieval?
Show answer details
Correct answer: D
This option is the most correct and efficient. It uses a CAML query to filter the items on the server (
Whereclause) and specifies exactly which fields to return (ViewFieldsclause). This minimizes both the data processed on the server and the data transferred over the network. The other options either retrieve all items, retrieve all fields for the filtered items, or redundantly specify the fields in both the CAML and theloadmethod. - 10
A development team is using Design Manager to create a new master page for a public-facing SharePoint 2013 publishing site. A designer provides an HTML file with corresponding CSS and JavaScript assets. The goal is to create a responsive design that uses a different CSS file for mobile devices. Which Design Manager feature should be used to apply a specific master page based on the user agent string of a mobile browser?
Show answer details
Correct answer: C
Device Channels are the specific feature in SharePoint 2013 designed to render a single publishing site in multiple ways by using different master pages and CSS files based on the browser's user agent string. This allows for creating optimized, responsive views for different devices like phones and tablets.
