S90.18 無料問題集「SOA Fundamental SOA Security」
Service A hashes a message, resulting in message digest X.
Service A encrypts message
digest X with its private key, resulting in cipher text X1.
Service A sends the message and
X1 to Service B.
Service B hashes the message, resulting in message digest Y.
Service B
decrypts X1 with Service A's public key, recovering message digest X1.
Service B
compares X and Y and finds them not to be equal. This proves that;
Service A encrypts message
digest X with its private key, resulting in cipher text X1.
Service A sends the message and
X1 to Service B.
Service B hashes the message, resulting in message digest Y.
Service B
decrypts X1 with Service A's public key, recovering message digest X1.
Service B
compares X and Y and finds them not to be equal. This proves that;
正解：D
解答を投票する
You are responsible for designing Service A, which must compose Services B and C.
You are able to apply the necessary security mechanisms to ensure that messages exchanged
by Service A comply with your security requirements. However, you are not given access to
the design specifications for Services B and C.
Based on the information that is published
about Services B and C, you cannot guarantee that these services will provide the same
level of security as Service A.
This limitation was placed upon you as a result of the
application of which service-orientation principle?
You are able to apply the necessary security mechanisms to ensure that messages exchanged
by Service A comply with your security requirements. However, you are not given access to
the design specifications for Services B and C.
Based on the information that is published
about Services B and C, you cannot guarantee that these services will provide the same
level of security as Service A.
This limitation was placed upon you as a result of the
application of which service-orientation principle?
正解：A
解答を投票する
A service consumer submits a message with security credentials to an authentication
broker, which authenticates the credentials against a central identity store. The
authentication broker then responds with a token that the service consumer can use to
access Services A, B, and C (none of which have their own identity store). This scenario
demonstrates the application of which pattern?
broker, which authenticates the credentials against a central identity store. The
authentication broker then responds with a token that the service consumer can use to
access Services A, B, and C (none of which have their own identity store). This scenario
demonstrates the application of which pattern?
正解：C
解答を投票する
Service A requires self-signed digital certificates from all of its service consumers. The
service and its service consumers both belong to the same organization. You are
presented with a new requirement to only allow access to those service consumers with
certificates that have not expired. How can this requirement be addressed with minimal
impacts on the current security architecture?
service and its service consumers both belong to the same organization. You are
presented with a new requirement to only allow access to those service consumers with
certificates that have not expired. How can this requirement be addressed with minimal
impacts on the current security architecture?
正解：C
解答を投票する
A project team is planning to create a secure service composition that consists of services
from two different domain service inventories. The security mechanisms for each service
inventory are based on different vendor technologies that adhere to the same industry
standards and the same design standards. What is wrong with this service composition
architecture?
from two different domain service inventories. The security mechanisms for each service
inventory are based on different vendor technologies that adhere to the same industry
standards and the same design standards. What is wrong with this service composition
architecture?
正解：B
解答を投票する
Service A requires certificates signed by a trusted certificate authority. The certificate
authority publishes a Certificate Revocation List (CRL) on a frequent basis. As a result,
some of the service consumers that were previously authorized to access Service A will not
be able to after new CRLs are issued. How can this security requirement be enforced?
authority publishes a Certificate Revocation List (CRL) on a frequent basis. As a result,
some of the service consumers that were previously authorized to access Service A will not
be able to after new CRLs are issued. How can this security requirement be enforced?
正解：D
解答を投票する