Arcitura Education S90.18 Exam - Topic 5 Question 31 Discussion

Question

Service A is an agnostic service that currently uses message-layer security implemented by symmetric encryption. However, because Service A has recently been successfully attacked, it has been decided that asymmetric encryption needs to be used instead. The nature of the messages exchanged by Service A requires that only some parts of the message data need to be encrypted. Although it is agreed that asymmetric encryption is required, architects are concerned that it will adversely affect the service's runtime performance. Which of the following approaches will fulfill these security requirements with the least amount of performance degradation?

Rodolfo · Accepted Answer

B) Only the required parts of the message need to be encrypted instead of encrypting the entire message.

Rodolfo · Answer

A) An authentication broker needs to be introduced with a dedicated identity store.

Rodolfo · Answer

C) The Direct Authentication pattern needs to be applied so that no intermediary is involved between Service A and its service consumers.

Rodolfo · Answer

D) Certificates need to be issued by a registered certificate authority.