Developing ASP.NET MVC Web Applications — Question 175

You are developing an ASP.NET MVC application that will be deployed on a web farm.
Passwords must be stored in the web.config file and must not be readable or in a format that is easily decodable
You need to encrypt the passwords that are stored in the web.config file.
Which command-line tool should you use?

Answer options

• A. Aspnet_regiis.exe
• B. Ngen.exe
• C. Aspnet_merge.exe
• D. EdmGen.exe

Correct answer: A

Explanation

The correct tool for encrypting sections of the web.config file, including passwords, is Aspnet_regiis.exe. Ngen.exe is used for pre-compiling .NET assemblies, Aspnet_merge.exe is for merging ASP.NET assemblies, and EdmGen.exe is related to Entity Framework model generation, making them unsuitable for this task.