Discuss Arcitura Education S90.19 Exam Topic 5 Question 32

Service A requires message confidentiality using message-layer security. You are asked to create a security policy for Service A that communicates its confidentiality requirements. However, you have not yet determined the type of encryption mechanism that will be used to enable message confidentiality. What types of binding assertions can you use to convey what service consumers should expect in the WS-Security header of SOAP messages exchanged by the service?

ATransport binding assertion

BSymmetric binding assertion

CAsymmetric binding assertion

DProtection binding assertion

Suggested Answer: B, C

Get Premium S90.19 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

10 comments · newest first

Keneth 11 months ago

I’m surprised there’s so many options for binding assertions!

Felix 12 months ago

Symmetric binding could work too, but not as flexible as asymmetric.

Jeniffer 12 months ago

Wait, can we really use Transport binding for message confidentiality?

Melvin 12 months ago

Definitely agree, it’s all about securing those messages!

Josefa 1 year ago

I think the Protection binding assertion is key for confidentiality.

Juliann 1 year ago

Okay, I've got this. The key is understanding how the SOAP header can be used to provide additional routing information. I'm pretty confident I can identify the right attack technique here.

Gayla 1 year ago

Okay, let's see here. This looks like a classic critical path analysis question. I'll need to map out the dependencies and durations to determine the critical path and project duration.

Rickie 1 year ago

Okay, let's see. I know criminals often use things like unallocated space, steganography, and changing metadata to hide their activities. I think I've got a good handle on this.

Jamal 1 year ago

Hmm, I'm a little unsure about this one. I know PIAs are important for compliance, but I'm not sure if the primary reason is just to comply with regulations or if there's more to it. I might need to review my notes on this.

Hillary 1 year ago

I think the code should compile fine, but I'm a bit hazy on what the output will be. Maybe it will say "I am not empty"?

Arcitura Education S90.19 Exam - Topic 5 Question 32 Discussion