SOA Fundamental SOA Security - S90.18무료 덤프문제 풀어보기
The application of the Service Abstraction principle can hinder your ability to fully determine
how a service composition is secured because you may not be able to find out how all
composed services are secured.
how a service composition is secured because you may not be able to find out how all
composed services are secured.
정답: A
You are required to design security mechanisms to enable secure message exchanges
between different domain service inventories within the same organization. This needs to
be documented in the design specification for which type of service-oriented architecture?
between different domain service inventories within the same organization. This needs to
be documented in the design specification for which type of service-oriented architecture?
정답: B
XML canonicalization is the process of standardizing the syntax of XML documents that are
to be digitally signed. This way, when the digital signature is verified, it reproduces the
same message digest for assessing message integrity.
to be digitally signed. This way, when the digital signature is verified, it reproduces the
same message digest for assessing message integrity.
정답: A
Both the Brokered Authentication pattern and the Direct Authentication pattern advocate
the use of a central identity store.
the use of a central identity store.
정답: B
Service A is an agnostic service that currently uses message-layer security implemented
by symmetric encryption. However, because Service A has recently been successfully
attacked, it has been decided that asymmetric encryption needs to be used instead. The
nature of the messages exchanged by Service A requires that only some parts of the
message data need to be encrypted. Although it is agreed that asymmetric encryption is
required, architects are concerned that it will adversely affect the service's runtime
performance. Which of the following approaches will fulfill these security requirements with
the least amount of performance degradation?
by symmetric encryption. However, because Service A has recently been successfully
attacked, it has been decided that asymmetric encryption needs to be used instead. The
nature of the messages exchanged by Service A requires that only some parts of the
message data need to be encrypted. Although it is agreed that asymmetric encryption is
required, architects are concerned that it will adversely affect the service's runtime
performance. Which of the following approaches will fulfill these security requirements with
the least amount of performance degradation?
정답: B
As part of Service Composition A, a service consumer needs to authenticate itself to four
different services. The Direct Authentication pattern was applied to each of these four
services, all of which share the same identity store. This identity store is also shared by a
number of additional services. As a result of increased usage, the identity store has
become a performance bottleneck. The resulting performance degradation is impacting
Service Composition A to the extent that it is causing problems. The security architecture
for Service Composition A needs to be improved in order to avoid further performance
degradation. However, any changes to the service composition architecture cannot break
any dependencies with the existing service consumer. Which of the following approaches
fulfills these requirements?
different services. The Direct Authentication pattern was applied to each of these four
services, all of which share the same identity store. This identity store is also shared by a
number of additional services. As a result of increased usage, the identity store has
become a performance bottleneck. The resulting performance degradation is impacting
Service Composition A to the extent that it is causing problems. The security architecture
for Service Composition A needs to be improved in order to avoid further performance
degradation. However, any changes to the service composition architecture cannot break
any dependencies with the existing service consumer. Which of the following approaches
fulfills these requirements?
정답: B
The Direct Authentication pattern is best suited for point-to-point communication, while the
Brokered Authentication pattern is best suited for service composition where a service
consumer needs to re-authenticate itself with multiple services.
Brokered Authentication pattern is best suited for service composition where a service
consumer needs to re-authenticate itself with multiple services.
정답: A
Digital signatures use encryption and hashing.
정답: A
Which of the following is not a hashing algorithm?
정답: A
The manager of an IT department decides to split up an existing enterprise service
inventory into two domain service inventories. The public key used previously in the
enterprise service inventory can continue to be used in one of the domain service
inventories.
inventory into two domain service inventories. The public key used previously in the
enterprise service inventory can continue to be used in one of the domain service
inventories.
정답: A