Question: You are creating a new security policy for an application domain. You write the following lines of code.
PolicyLevel =policy = PolicyLevel::CreateAppDomainLevel();
PolicyStatement =noTrustStatement =
gcnew PolicyStatement(
policy->GetNamedPermissionSet("Nothing"));
PolicyStatement =fullTrustStatement =
gcnew PolicyStatement(
policy->GetNamedPermissionSet("FullTrust"));
You need to arrange code groups for the policy so that loaded assemblies default to the Nothing permission set. If the assembly originates from a trusted zone, the security policy must grant the assembly the FullTrust permission set.
Which code segment should you use?
gcnew ZoneMembershipCondition(SecurityZone::Trusted), fullTrustStatement);
CodeGroup =group2 = gcnew UnionCodeGroup(
gcnew AllMembershipCondition(),
noTrustStatement);
group1->AddChild(group2);
B
gcnew AllMembershipCondition(),
noTrustStatement);
C
gcnew ZoneMembershipCondition(SecurityZone::Trusted), fullTrustStatement);
D
gcnew AllMembershipCondition(),
noTrustStatement);
CodeGroup =group2 = gcnew UnionCodeGroup(
gcnew ZoneMembershipCondition(SecurityZone::Trusted), fullTrustStatement);
group1->AddChild(group2);