MENU
A service uses specialized screening logic that compares the size of a message against a maximum allowable size value. This value is specified for an incoming request message for a specific service capability. Upon a mismatch, the service rejects the request message and instead generates an error message. What type of attack has this security architecture not addressed?
Suggested Answer: D
Get Premium S90.19 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
8 comments · newest first
IL
Ilda
12 months ago
Exception shielding is also a concern, but not the main one.
CU
Curtis
12 months ago
I think it's just buffer overruns that are missed here.
TY
Ty
1 year ago
Wait, are we sure it doesn't address XML parser attacks too?
ER
Erasmo
1 year ago
Totally agree, buffer overruns are a big risk!
HA
Harrison
1 year ago
This doesn't cover buffer overrun attacks.
CA
Carylon
1 year ago
Okay, I think I've got it. The key is that the search has to not violate a "reasonable" or "legitimate" expectation of privacy. That means it's constitutional, not illegal or unethical.
DO
Doyle
1 year ago
Okay, I think I've got this. Adding an element to an enum without a default is considered a breaking change in Avro, since it can cause compatibility issues with existing data. I'm pretty sure that's the right answer.
CO
Cornell
1 year ago
Okay, let's see here. Adding a data operation that specifies the false conditions sounds like it could be a good approach, but I'm not entirely sure. I'll have to think this through.