Arcitura Education Fundamental SOA Security S90.18 Exam Questions

A service consumer submits a message with security credentials to an authentication broker, which authenticates the credentials against a central identity store. The authentication broker then responds with a token that the service consumer can use to access Services A, B, and C (none of which have their own identity store). This scenario demonstrates the application of which pattern?

Which of the following SOA characteristics relate to the use of security mechanisms that support the reuse of services as part of multiple service compositions?

As part of Service Composition A, a service consumer needs to authenticate itself to four different services. The Direct Authentication pattern was applied to each of these four services, all of which share the same identity store. This identity store is also shared by a number of additional services. As a result of increased usage, the identity store has become a performance bottleneck. The resulting performance degradation is impacting Service Composition A to the extent that it is causing problems. The security architecture for Service Composition A needs to be improved in order to avoid further performance degradation. However, any changes to the service composition architecture cannot break any dependencies with the existing service consumer. Which of the following approaches fulfills these requirements?

A service that issues a SAML assertion is called a Policy Decision Point (PDP) while a service that accepts a SAML assertion is called a SAML authority.

The application of the Service Abstraction principle can hinder your ability to fully determine how a service composition is secured because you may not be able to find out how all composed services are secured.

A valid signature issued by a certificate authority provides a guarantee that:

In order to express the order in which a message is signed and encrypted, the _________ industry standard can be used.