Arcitura Education Fundamental SOA Security S90.18 Exam Questions

When working with SAML, a Security Token Service (STS) and a Service Provider refer to the same service.

By applying the Data Origin Authentication pattern together with the Brokered Authentication pattern, you guarantee confidential message exchanges by a service consumer that needs to repeatedly authenticate itself with a set of services within the same service composition.

The receiver of a message decrypts an encrypted message digest using the public key of the sender that corresponds to the private key. The receiver then matches it against the digest of the original message. If the decrypted digest and the newly calculated digest match, then what does it prove?

The Data Confidentiality pattern can be applied using which of the following security mechanisms?

The application of the Service Autonomy principle is always negatively affected when applying the Data Confidentiality pattern together with the Data Origin Authentication pattern.

Service A relies on a shared identity store. Service B has its own identity store. Service C also has its own identity store, but must also access the shared identity store used by Service A . Which service has the least reduction in autonomy as a result of its relationship with identity store mechanism(s)?

The application of the Data Origin Authentication pattern only provides message integrity.