S90.18無料問題集「SOA Fundamental SOA Security」

質問 1

The services in a service inventory have all been built with compatible security
technologies and mechanisms. Now, security policies are being introduced for the first
time. How can security policies become part of the service inventory and its services while
adhering to the application of the Standardized Service Contract principle?

（A）None of the above

（B）SAML is used to ensure that security policies are consistently enforced, thereby
naturally complying to service contract standards.

（C）Canonical XML is used to ensure that all security policies are based on canonical policy
models.

（D）Both SAML and Canonical XML are required to ensure that that Standardized Service
Contract principle can be effectively applied.

正解：A 解答を投票する

質問 2

By applying the Data Origin Authentication pattern together with the Brokered
Authentication pattern, you guarantee confidential message exchanges by a service
consumer that needs to repeatedly authenticate itself with a set of services within the same
service composition.

（A）False

（B）True

正解：A 解答を投票する

質問 3

The manager of an IT department decides to split up an existing enterprise service
inventory into two domain service inventories. The public key used previously in the
enterprise service inventory can continue to be used in one of the domain service
inventories.

（A）False

（B）True

正解：B 解答を投票する

質問 4

Which of the following tasks directly relates to the application of the Service Loose
Coupling principle?

（A）Creating one security policy that is shared by multiple services.

（B）All of the above.

（C）Creating multiple security policies that are specific to one service.

（D）Creating one security policy that is specific to one service.

正解：B 解答を投票する

質問 5

As a requirement for accessing Service B, Service A needs to encrypt its request message.
Service B decrypts the message, makes some changes, encrypts the message, and then
forwards it to Service C.
However, the message does not make it to Service C.
Instead, a runtime error is raised by a service agent that does not support encryption. This service
agent only requires access to the message header in order to route the message to the
appropriate instance of Service C.
It is therefore decided that the header part of the message will not be encrypted. Which of the following can be used to address this
requirement?

（A）None of the above

（B）non-repudiation

（C）SAML

（D）certificate authority

正解：A 解答を投票する

質問 6

Which of the following are valid reasons for a certificate to be revoked:

（A）The certificate was fraudulently obtained

（B）The subject is no longer permitted to use the certificate

（C）The private key has been compromised

（D）The public key has been compromised

正解：A、B、C 解答を投票する

質問 7

In order to express the order in which a message is signed and encrypted, the _________
industry standard can be used.

（A）XSL Transformations for XML

（B）Decryption Transform for XML-Signature

（C）XML-Ordering

（D）None of the above.

正解：B 解答を投票する

質問 8

Which of the following is the primary technology used for the application of the Data Origin
Authentication pattern?

（A）SAML claims

（B）None of the above

（C）symmetric encryption

（D）security tokens

正解：B 解答を投票する

質問 9

Which of the following approaches represents a valid means of utilizing generic security
logic?

（A）When required, generic security logic can be abstracted into a separate utility service.
This allows for reuse.

（B）When required, generic security logic can be embedded within a service. The close
proximity to the service logic maximizes the chances that the security logic will be
consistently executed without interference from attackers.

（C）All of the above.

（D）When required, generic security logic can be abstracted into a service agent. This allows
for reuse and the security logic can be executed in response to runtime events.

正解：C 解答を投票する

質問 10

You are responsible for designing Service A, which must compose Services B and C.
You are able to apply the necessary security mechanisms to ensure that messages exchanged
by Service A comply with your security requirements. However, you are not given access to
the design specifications for Services B and C.
Based on the information that is published
about Services B and C, you cannot guarantee that these services will provide the same
level of security as Service A.
This limitation was placed upon you as a result of the
application of which service-orientation principle?

（A）Service Abstraction

（B）Service Loose Coupling

（C）Service Statelessness

（D）Service Autonomy

正解：A 解答を投票する

S90.18 無料問題集「SOA Fundamental SOA Security」

弊社を連絡する

関連リンク

トップ試験