title: Persist Security Info in .Net 4
body: <p>You use Microsoft Visual Studio 2010 and Microsoft .NET Framework 4 to create an application.The application connects to a Microsoft SQL Server 2008 database. 
  The application uses a Microsoft ADO.NET SQL Server managed provider.When a connection fails, the application logs connection information, including the full connection string.The information is stored as plain text in a .config file. </p>
  
  <p>You need to ensure that the database credentials are secure. </p>
  
  <p>Which connection string should you add to the .config file? </p>
  
  <p><strong>A</strong>.Data Source=myServerAddress; Initial Catalog=myDataBase; Integrated Security=SSPI; Persist Security Info=false; </p>
  
  <p><strong>B</strong>.Data Source=myServerAddress; Initial Catalog=myDataBase; Integrated Security=SSPI; Persist Security Info=true; </p>
  
  <p><strong>C</strong>.Data Source=myServerAddress; Initial Catalog=myDataBase; User Id = myUsername; Password = myPassword; Persist Security Info=false; </p>
  
  <p><strong>D</strong>.Data Source=myServerAddress; Initial Catalog=myDataBase; User Id = myUsername; Password = myPassword; Persist Security Info=true; </p>
  
  <p>According to the guide, the answer is 'A'.  But in my opinion, the Answer is 'C'.  If we are using Integrated Security = SSPI, we don't need to supply UserID and Password.  So, Persist Security Info=false has no effect.</p>
  
  <p>As far as I know, Persist Security Info only takes effect if the connection string has User Credentials.  </p>
  
  <p>Could you please advise me which one is correct?  Thanks.</p>