Arcitura Education S90.19 Exam Questions Instant Access

Question 1

When designing XML schemas to avoid data-centric threats, which of the following are valid considerations?

AThe maxOccurs attribute needs to be specified using a restrictive value.

BThe <xsd:any> element needs to be avoided.

CThe <xsd:restriction> element can be used to create more restrictive user-defined simple types.

DAll of the above.

Answer : B, D

Question 2

An IT enterprise has three domain service inventories that map to three different departments. Each service inventory uses a security token service (STS) based authentication broker to enable single sign-on for services within the respective service inventory boundary. The tokens used for all single sign-on mechanisms are based on SAML assertions. You are given a new requirement to extend this security architecture so that services from different domain service inventories can communicate. What new security mechanisms are required to fulfill this requirement?

AThe individual authentication brokers need to be replaced with one single authentication broker so that one single token can be used by services across all domain service inventories.

BAn additional authentication broker needs to be added in between each domain service inventory in order to enable communication between services using disparate security tokens.

CThere is no need to introduce a new security mechanism. The individual domain service inventories need to be combined into a single enterprise service inventory. That way, the Service Perimeter Guard pattern can be applied so that services won't need to authenticate each other.

DThere is no need to introduce a new security mechanism. The existing SAML tokens can be used by services across the domain service inventories as long as the existing authentication brokers are configured to issue service inventory-specific assertions for SAML tokens from specific domain service inventories.

Answer : D

Question 3

Service A has recently been the victim of XPath injection attacks. Messages sent between Service A and Service C have traditionally been protected via transport-layer security. A redesign of the service composition architecture introduces Service B, which is positioned as an intermediary service between Service A and Service C . The Message Screening pattern was applied to the design of Service B . As part of the new service composition architecture, transport-layer security is replaced with message-layer security for all services, but Service A and Service C continue to share the same encryption key. After the new service composition goes live, Service A continues to be subjected to XPath injection attacks. What is the reason for this?

AThe message screening logic can only work for Service C . Therefore, Service A is not protected.

BBecause message-layer security is being used, it is not possible for the message screening logic in Service B to inspect messages without having the encryption key that is shared by Service A and Service C

CXPath injection attacks are not prevented by message screening logic or message-layer security.

DNone of the above.

Answer : B

Question 4

The application of the Trusted Subsystem pattern can help centralize access to services.

ATrue

BFalse

Answer : A

Question 5

The application of the Service Perimeter Guard pattern establishes a perimeter service that hides internal services from unauthorized external service consumers. However, the perimeter service grants authorized external services direct access to internal services.

ATrue

BFalse

Answer : B

Question 6

The use of a perimeter service can centralize authentication and authorization logic and it can also prevent direct access to other services positioned behind a firewall.

ATrue

BFalse

Answer : A

Question 7

___________ is an industry standard that describes mechanisms for issuing, validating, renewing and cancelling security tokens.

AWS-Security

BWS-Trust

CWS-SecureConversation

DWS-SecurityPolicy

Answer : B

Arcitura Education Advanced SOA Security S90.19 Exam Questions