MENU
A set of SAML tokens has been used as a result of the application of the Brokered Authentication pattern within a particular service inventory. Because SAML assertions normally contain a signature, the security specialist is confident that the integrity of messages will be maintained. What's wrong with this assumption?
Suggested Answer: A
Get Premium S90.18 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
SH
Shonda
11 months ago
The assumption is definitely not correct, there's more to it!
WI
Wilda
11 months ago
I think the issuer and validity period are crucial for integrity too.
WI
Winfred
11 months ago
Wait, are you saying SAML can't have signatures? That sounds off.
AR
Argelia
11 months ago
Totally agree, the integrity of the message is more complex!
WI
Willow
12 months ago
The signature only protects the assertion, not the whole message.
IS
Isaac
12 months ago
I feel like the assumption is flawed because the signature doesn't cover the entire message. So, I would lean towards option A.
LI
Lizbeth
1 year ago
I vaguely recall a practice question about SAML tokens, but I can't remember if the issuer's name affects integrity.
LE
Lemuel
1 year ago
I think the signature only ensures the integrity of the assertion itself, not the message as a whole. That sounds right.
SH
Shawnda
1 year ago
I remember discussing how SAML assertions are signed, but I’m not sure if that means the entire message is protected.
AL
Alberta
1 year ago
The security specialist's assumption seems reasonable to me. The signature in the SAML assertion should be enough to ensure the integrity of the messages, so I'll go with option D.
PO
Portia
1 year ago
SAML assertions can definitely contain signatures, so I don't think option C is correct. I'll need to carefully consider the other options to determine the best answer.
LI
Lisandra
1 year ago
I'm pretty confident that the signature in the SAML assertion is meant to protect the integrity of the assertion itself, not the entire message. I'll make sure to select option A.
AJ
Aja
1 year ago
Hmm, I'm a bit confused. I thought the SAML assertion also contained other metadata like the issuer and validity period that were important for ensuring message integrity. I'll have to double-check that.
OM
Omer
1 year ago
I've got a good feeling about this one. The options seem pretty clear, and I think I know the right answer.
CO
Corazon
2 years ago
The security specialist needs to brush up on their SAML knowledge. The signature is important, but it's not the whole story. They should also check the issuer and validity period to ensure message integrity.
VI
Vivan
2 years ago
The security specialist should verify the issuer and validity period in addition to the signature for message integrity.
EI
Eileen
2 years ago
B) SAML assertions also contain the name of the issuer and the validity period, which are needed in addition to the signature to ensure message integrity.
NO
Nohemi
2 years ago
A) The signature contained within the SAML assertion protects the integrity of the assertion, not of the message itself.
BE
Beckie
2 years ago
Haha, the security specialist must be new to this. SAML assertions without signatures? That's like having a birthday cake without candles!
AL
Alaine
2 years ago
I agree with Corrinne. The signature doesn't guarantee the integrity of the message, just the assertion. There could still be other parts of the message that are vulnerable.
LI
Ligia
2 years ago
C) SAML assertions cannot contain signatures.
TE
Tegan
2 years ago
I agree. The signature only covers the assertion, not the entire message.
SY
Sylvia
2 years ago
B) SAML assertions also contain the name of the issuer and the validity period, which are needed in addition to the signature to ensure message integrity.
TA
Tasia
2 years ago
A) The signature contained within the SAML assertion protects the integrity of the assertion, not of the message itself.
CH
Chaya
2 years ago
I'm not sure, but I think the answer might be B. The issuer and validity period are also important for ensuring message integrity.
LA
Lashaun
2 years ago
I agree with Hildred. The signature in the SAML assertion doesn't protect the message itself, so the assumption is not entirely correct.
HI
Hildred
2 years ago
I think the answer is A. The signature in the SAML assertion only protects the integrity of the assertion itself.
CO
Corrinne
2 years ago
The security specialist's assumption is incorrect. The signature in the SAML assertion only protects the integrity of the assertion itself, not the entire message.
AL
Alayna
2 years ago
B) SAML assertions also contain the name of the issuer and the validity period, which are needed in addition to the signature to ensure message integrity.
AL
Alayna
2 years ago
A) The signature contained within the SAML assertion protects the integrity of the assertion, not of the message itself.