Question from the ASP .NET test

You are developing an ASP.NET application that displays sensitive data from a SQL Server database. The database also contains the user authentication information. All web pages that display sensitive data are protected by an authentication request.

You are asked for the following prerequisites:

• Separate the authorization verification logic from the rest of the application code

• Prevent the application from accessing the database server directly

You need to set up the design for the data access layer and the authentication solution. What should you do?