Arcitura Education Fundamental SOA Security S90.18 Exam Questions

Both the Brokered Authentication pattern and the Direct Authentication pattern advocate the use of a central identity store.

The use of XML-Encryption supports the application of the Service Abstraction principle because the actual message remains hidden from the attacker.

With SAML, the _____________ element is used by the relying party to confirm that a given message came from the subject specified in the assertion.

Service A hashes a message, resulting in message digest X. Service A encrypts message digest X with its private key, resulting in cipher text X1. Service A sends the message and X1 to Service B. Service B hashes the message, resulting in message digest Y. Service B decrypts X1 with Service A's public key, recovering message digest X1. Service B compares X and Y and finds them not to be equal. This proves that;

SAML can be used for the application of the Brokered Authentication pattern.

Using message-layer security, if a service agent takes possession of a message, it can forward the message to another service.

Which of the following are valid security considerations specific to the application of the Service Autonomy principle?