Microsoft Exam 70-487 Study Guide

Other Study Guides

Tobias Nilsson's Study Guide (Alert Coding)
Chris Myers' Study Guide (Blogged by Chris)


PluralSight Learning Path
Microsoft Exam 70-487

Microsoft 70-487: Secure a Web API

Exam Objectives

Implement HTTPBasic authentication over SSL; implement Windows Auth; prevent cross-site request forgery (XSRF); design, implement, and extend authorization and authentication filters to control access to the application; implement Cross Origin Request Sharing (CORS); implement SSO by using OAuth 2.0; configure multiple authentication modes on a single endpoint

Quick Overview of Training Materials

Exam Ref 70-487 - Chapter 4.3
[Book] Pro ASP.NET Web API Security
[MSDN] Security, Authentication, and Authorization in ASP.NET Web API
   - Basic Authentication in ASP.NET Web API
   - Integrated Windows Authentication
   - Preventing Cross-Site Request Forgery Attacks in ASP.NET Web API
   - Authentication Filters in ASP.NET Web API 2
   - Enabling Cross-Origin Requests in ASP.NET Web API 2
   - External Authentication Services with ASP.NET Web API (OAuth)
[Video] Dominick Baier - Securing ASP.NET Web APIs
   - Sample Code, Slide Deck
[DotNetCurry] Preventing CSRF Hacks in ASP.NET WebAPI
[Blog] A WebAPI Basic Authentication Authorization Filter

[PluralSight] Implementing an API in ASP.NET Web API (Securing APIs)
[PluralSight] Web API v2 Security

Previous posts on ASP.NET security:
   Implement a secure site with ASP.NET
   Secure a WCF service
   Design and implement claims-based authentication

My code samples are here: GitHub

Microsoft 70-487: Host and manage Web API

Exam Objectives

Host Web API in an ASP.NET app; self-host a Web API in your own process (a Windows service) including Open Web Interface for .NET (OWIN); host services in an Azure worker role; restrict message size; configure the host server for streaming

Quick Overview of Training Materials

Exam Ref 70-487 - Chapter 4.4
[MSDN] ASP.NET Web API: Deployment and Hosting
   - Use OWIN to Self-Host ASP.NET Web API 2
   - Host ASP.NET Web API 2 in an Azure Worker Role

[Blog] Dealing with large files in ASP.NET Web API
[Blog] Video streaming inside self-host app with Owin/Katana
[Stack Overflow] How do I configure  max message size in  Web API

[Stack Overflow] Web API Request Streaming Support

Microsoft 70-487: Consume Web API web services

Exam Objectives

Consume Web API services by using HttpClient synchronously and asynchronously; send and receive requests in different formats (JSON/HTML/etc.); request batching

Quick Overview of Training Materials

Exam Ref 70-487 - Chapter 4.5
[MSDN] Calling a Web API From a .NET Client (C#)
[Code-Maze] A few great ways to consume RESTful API in C#

[Blog] ASP.NET Web API Request Batching
[Blog] You're using HttpClient wrong and it is destabilizing your software
[StackOverflow] How do you set the Content-Type header for an HttpClient request?
[MSDN] Introducing batch support in Web API and Web API OData

Microsoft 70-487: Implement a Web API

Exam Objectives

Accept data in JSON format (in JavaScript, in an AJAX callback); use content negotiation to deliver different data formats to clients; define actions and parameters to handle data binding; use HttpMessageHandler to process client requests and server responses; implement dependency injection, along with the dependency resolver, to create more flexible applications; implement action filters and exception filters to manage controller execution; implement asynchronous and synchronous actions; implement streaming actions; implement SignalR; test Web API web services

Quick Overview of Training Materials

Exam Ref 70-487 - Chapter 4.2
[Book] Designing Evolvable Web API's with ASP.NET - Chapter 13 (Model binding)
[MSDN] Web API Documentation:
   - JSON and XML Serialization in ASP.NET Web API
   - Content Negotiation in ASP.NET Web API
   - Parameter Binding in ASP.NET Web API
   - HTTP Message Handlers in ASP.NET Web API
   - Dependency Injection in ASP.NET Web API 2
   - Exception Handling in ASP.NET Web API
   - Testing and Debugging ASP.NET Web API
[MSDN] ASP.NET Web API 2: Http Message Lifecycle poster
[Blog] Web API 2 using ActionFilterAttribute ...
[Blog] ASP.NET MVC and Web API - Comparison of Async / Sync Actions
[CodeProject] Web API Thoughts 1 of 3 - Data Streaming
[CSharpCorner] Asynchronous Video Live Streaming with ASP.NET Web APIs 2.0
[Blog] Testing routes in ASP.NET Web API

[MSDN] SignalR Documentation
[PluralSight] Implementing an API in ASP.NET Web API

[PluralSight] Building and Securing a RESTful API for Multiple Clients in ASP.NET

"Effective Java" book outline

Effective Java was written by Joshua Bloch in 2001, and the second edition released in 2009 shortly after the release of Java 6.  I received a copy of the second edition from my manager as recommended reading.  While it was sometimes a little dated, it still made for easy reading, and it felt like most of the recommendations would still be pretty relevant.  As it happens, there is now a third edition that covers Java 7, 8, and 9 which may be worth checking out...

Overall I was impressed with the advice given in the book.  In order to make better practical use of it, I wanted to create a basic "outline" view that I could easily find and scan, making reference back to the book if needed.  That is really all this post is.  I thought about adding "notes"... either to each item or to each section, but they just cluttered it up.  I want this to be more a quick cheat sheet of the guidelines, not a full blown Readers Digest edition of the book...