MENU
Service A is owned by Organization A . Service A sends a message containing confidential data to Service B, which is owned by Organization B . Service B sends the message to Service C, which is also owned by Organization B . Organization A trusts Organization B, which means there is no requirement to protect messages from intermediaries and after a message is received by Service B (and as long as the message remains within the boundary of Organization B), there is no requirement to keep the message data confidential. Which of the following approaches will fulfill these security requirements with the least amount of performance degradation?
Suggested Answer: A
Get Premium S90.18 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
SI
Sina
11 months ago
SAML tokens are cool, but might add overhead.
SA
Samuel
11 months ago
Transport-layer security is a solid approach!
VI
Virgina
11 months ago
Wait, why would they trust Organization B so easily?
SK
Skye
11 months ago
I disagree, XML-Encryption could be more secure.
AR
Aretha
12 months ago
Option B seems like the best choice for performance.
IL
Iluminada
12 months ago
Introducing an authentication broker sounds like it could complicate things, but I can't recall if it would actually help with performance.
YU
Yuki
1 year ago
SAML tokens seem more about authentication than confidentiality, so I'm not sure if that would meet the requirements here.
YO
Yolando
1 year ago
I think using transport-layer security for the communication channel is a common practice and might be the best option for performance.
KA
Kaitlyn
1 year ago
I remember that encrypting messages with XML-Encryption might add some overhead, but it could be necessary for confidentiality.
LA
Lashandra
1 year ago
This is a tricky one. I'm not sure if the SAML tokens or authentication broker are really necessary given the trust relationship. I'll need to carefully weigh the pros and cons of each approach.
EL
Elin
1 year ago
I'm leaning towards option A since it provides message-level encryption, which seems more secure than just encrypting the transport channel. But I'll need to double-check the performance implications.
AJ
Aja
1 year ago
Okay, I think I've got it. The key is that there's no need to protect the message once it's within Organization B, so I'd go with option B to minimize performance impact.
DE
Desire
1 year ago
Hmm, I'm a bit confused by the trust relationship between the organizations. I'll need to make sure I understand that part before deciding on the best solution.
DE
Denae
1 year ago
This seems like a straightforward security question. I'll need to carefully read through the requirements and think about the most efficient approach.
GO
Goldie
1 year ago
Okay, I think I've got it. Since the latitude of origin is becoming less negative, the map will shift upwards, so the data will move north.
JO
Jolene
1 year ago
I practiced a similar question on using "Families" for design elements; could it be that?
DO
Dolores
1 year ago
Hmm, I'm a bit unsure about the specifics of how to mark traffic in a GRE tunnel. I'll need to review my notes on QoS and header fields.
RI
Ria
1 year ago
Option B all the way! Unless you're working for the NSA, there's no need to turn this into a James Bond movie. Transport-layer encryption is the way to go, folks.
GW
Gwen
1 year ago
Option B is the clear winner here. Why make things more complex than they need to be? Keep it simple and secure with transport-layer encryption.
AN
Antonette
1 year ago
C) SAML security tokens are used so that Service B can authenticate Service A.
RY
Ryan
1 year ago
B) The communication channel between Service A and Service B is encrypted using a transport-layer security technology.
VE
Verda
1 year ago
A) Messages exchanged between Service A and Service B are encrypted using XML-Encryption.
AN
Annalee
2 years ago
Hmm, I'm not sure. Option C with SAML tokens might be a bit overkill, but it could provide more robust authentication. Tough call, but I'd probably still go with Option B.
TA
Tammy
1 year ago
I think I'll stick with Option B for now.
ST
Stephania
1 year ago
True, but it might be overkill for this scenario.
JO
Jolene
1 year ago
But Option C with SAML tokens could provide more robust authentication.
MI
Mignon
1 year ago
Option B sounds good. It encrypts the communication channel between Service A and Service B.
RO
Rory
2 years ago
I agree with Gregoria. Option B is the way to go. No need to over-complicate things when a simple transport-layer encryption can do the job.
LI
Lisha
1 year ago
I agree, using transport-layer security is the most efficient way to fulfill the security requirements.
SH
Sherrell
1 year ago
I think option B is the best choice. It's simple and effective.
NA
Nan
2 years ago
But wouldn't encrypting the communication channel be more efficient?
RE
Reena
2 years ago
I disagree, I believe option C is more secure.
GR
Gregoria
2 years ago
Option B seems like the best choice here. Encrypting the communication channel at the transport layer is a lightweight and efficient way to meet the security requirements without the overhead of XML encryption or SAML tokens.
YO
Yolando
1 year ago
An authentication broker could add an extra layer of security between the services.
HO
Howard
1 year ago
I prefer option A, encrypting the messages between Service A and Service B.
JA
Janella
1 year ago
I think using SAML security tokens could also work well for authentication.
NA
Nadine
1 year ago
I agree, option B is a good choice for this scenario.
NA
Nan
2 years ago
I think option B is the best choice.