Arcitura Education S90.19 Exam - Topic 5 Question 32 Discussion

Actual exam question for Arcitura Education's S90.19 exam

Question #: 32
Topic #: 5

Service A requires message confidentiality using message-layer security. You are asked to create a security policy for Service A that communicates its confidentiality requirements. However, you have not yet determined the type of encryption mechanism that will be used to enable message confidentiality. What types of binding assertions can you use to convey what service consumers should expect in the WS-Security header of SOAP messages exchanged by the service?

ATransport binding assertion

BSymmetric binding assertion

CAsymmetric binding assertion

DProtection binding assertion

Show Suggested Answer

Suggested Answer: B, C

by Heike at May 08, 2022, 09:50 AM

Limited Time Offer

25%

Off

Get Premium S90.19 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Keneth

4 months ago

I’m surprised there’s so many options for binding assertions!

upvoted 0 times

...

Felix

4 months ago

Symmetric binding could work too, but not as flexible as asymmetric.

upvoted 0 times

...

Jeniffer

4 months ago

Wait, can we really use Transport binding for message confidentiality?

upvoted 0 times

...

Melvin

4 months ago

Definitely agree, it’s all about securing those messages!

upvoted 0 times

...

Josefa

5 months ago

I think the Protection binding assertion is key for confidentiality.

upvoted 0 times

...

Juliann

5 months ago

Okay, I've got this. The key is understanding how the SOAP header can be used to provide additional routing information. I'm pretty confident I can identify the right attack technique here.

upvoted 0 times

...

Gayla

5 months ago

Okay, let's see here. This looks like a classic critical path analysis question. I'll need to map out the dependencies and durations to determine the critical path and project duration.

upvoted 0 times

...

Rickie

5 months ago

Okay, let's see. I know criminals often use things like unallocated space, steganography, and changing metadata to hide their activities. I think I've got a good handle on this.

upvoted 0 times

...

Jamal

5 months ago

Hmm, I'm a little unsure about this one. I know PIAs are important for compliance, but I'm not sure if the primary reason is just to comply with regulations or if there's more to it. I might need to review my notes on this.

upvoted 0 times

...

Hillary

5 months ago

I think the code should compile fine, but I'm a bit hazy on what the output will be. Maybe it will say "I am not empty"?

upvoted 0 times

...