Service A contains a service capability that runs a complex mathematical function, which results in
runtime failure if invalid input values are supplied by a service consumer. Security needs to be added
so that it can be verified that message content received by Service A has not been altered since the
message was sent by a legitimate service consumer. Which pattern needs to be applied to fulfill this
security requirement?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Q: 2
Using transport-layer security, an active intermediary that takes possession of a message can
compromise:
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Q: 3
In order to express the order in which a message is signed and encrypted, the _________ industry
standard can be used.
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Q: 4
A service that was previously using a shared identity store is now given its own dedicated identity
store instead. What are the likely impacts (positive or negative) that will result from this change?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
AB
Q: 5
Service A hashes a message, resulting in message digest X. Service A encrypts the message digest X
with its private key, resulting ir ciphertext X1. Service A sends the message and X1 to Service B .
Service B hashes the message, resulting in message digest Y. Service B decrypts X1 with Service A's
public key, recovering message digest X. Service B compares Y with X and finds them to be equal.
This proves that:
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
D
Q: 6
The more _____________ the security architecture is across services, the more ____________the
service composition architecture.
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Q: 7
Service A relies on a shared identity store. Service B has its own identity store. Service C also has its
own identity store, but must also access the shared identity store used by Service A . Which service
has the least reduction in autonomy as a result of its relationship with identity store mechanism(s)?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Q: 8
The communication between two services operating within the same organization needs to be
protected using message-layer security. These services are only used within the organizational
boundary. The question is raised as to whether to use self-signed certificates or certificates signed by
a certificate authority. A security specialist states that only certificates signed by an external
certificate authority can be used to fulfill this security requirement. Is this correct?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Q: 9
Username and X.509 token profiles can be combined so that a single message can contain a
username token that is digitally signed.
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Q: 10
When working with SAML, a Security Token Service (STS) and a Service Provider refer to the same
service.
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Q: 11
The SAML and WS-Security industry standards can be applied to the same service composition
architecture.
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Q: 12
XML canonicalization is the process of standardizing the syntax of XML documents that are to be
digitally signed. This way, when the digital signature is verified, it reproduces the same message
digest for assessing message integrity.
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Q: 13
The Data Origin Authentication pattern is applied to services throughout a service inventory. As a
result, if malicious service intermediaries change data within messages exchanged by these services,
such changes will be detected.
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Q: 14
The application of the Service Composability principle dictates that services acting as composition
members be designed to establish and propagate a security context to other composition members,
while services acting as composition controllers be designed so that they are prepared to join a
security context already in progress rather than carrying out authentication themselves.
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Q: 15
Security mechanisms that are based on vendor-specific security technology will always decrease the
autonomy of services that are required to use these security mechanisms.
