Free Arcitura Education S90.19 Exam Dumps and S90.19 Exam Questions

Question No: 1

MultipleChoice

The use of session keys and symmetric cryptography results in:

Options

AIncreased performance degradation

BIncreased reliability degradation

CReduced message sizes

DPublic key, key agreement security session

Question No: 2

MultipleChoice

Service A's logic has been implemented using unmanaged code. An attacker sends a message to Service A that contains specially crafted data capable of manipulating the quoting within a particular XPath expression. This results in the release of confidential information. Service A is a victim of which kind of attack?

Options

ABuffer overrun attack

BInsufficient authorization attack

CXPath injection attack

DNone of the above.

Question No: 3

MultipleChoice

The difference between the Exception Shielding and Message Screening patterns is in how the core service logic processes incoming messages received by malicious service consumers?

Options

ATrue

BFalse

Question No: 4

MultipleChoice

An IT enterprise has three domain service inventories that map to three different departments. Each service inventory uses a security token service (STS) based authentication broker to enable single sign-on for services within the respective service inventory boundary. The tokens used for all single sign-on mechanisms are based on SAML assertions. You are given a new requirement to extend this security architecture so that services from different domain service inventories can communicate. What new security mechanisms are required to fulfill this requirement?

Options

AThe individual authentication brokers need to be replaced with one single authentication broker so that one single token can be used by services across all domain service inventories.

BAn additional authentication broker needs to be added in between each domain service inventory in order to enable communication between services using disparate security tokens.

CThere is no need to introduce a new security mechanism. The individual domain service inventories need to be combined into a single enterprise service inventory. That way, the Service Perimeter Guard pattern can be applied so that services won't need to authenticate each other.

DThere is no need to introduce a new security mechanism. The existing SAML tokens can be used by services across the domain service inventories as long as the existing authentication brokers are configured to issue service inventory-specific assertions for SAML tokens from specific domain service inventories.

Question No: 5

MultipleChoice

Architects responsible for a domain service inventory are being asked to make some of their services available to service consumers from outside the organization. However, they are reluctant to do so and consult you to help define a security architecture that will keep all of the existing services within the domain service inventory hidden within a private network. Which option best is a valid approach for fulfilling this requirement?

Options

AApply the Brokered Authentication pattern to position an authentication broker outside the private network that has been configured to access the internal services via a firewall. The authentication broker becomes the sole contact point for external service consumers.

BApply the Service Perimeter Guard pattern in order to position a perimeter service outside the private network that has been configured to access the internal services via a firewall. The perimeter service becomes the sole contact point for external service consumers.

CApply the Trusted Subsystem pattern in order to position a service outside the private network that authenticates each incoming request and then uses its own set of credentials to get access to internal services. This service becomes the sole contact point for external service consumers.

DNone of the above.

Question No: 6

MultipleChoice

The Service Perimeter Guard pattern is applied to position a perimeter service outside of the firewall. The firewall only permits the perimeter service to access services within a specific service inventory. Which option best statements describes a valid problem with this security architecture?

Options

AThe Trusted Subsystem pattern was not applied to the perimeter service.

BThe perimeter service needs to be located inside the firewall and the firewall needs to be configured so that only known service consumers have access to the service inventory.

CThe Service Perimeter Guard pattern cannot be applied to a service outside of a service inventory.

DThere is no need to introduce a new security mechanism. The existing SAML tokens can be used by services across the domain service inventories as long as the existing authentication brokers are configured to issue service inventory-specific assertions for SAML tokens from specific domain service inventories.

Question No: 7

MultipleChoice

Which of the following are types of security sessions?

Options

AAuthentication

BAuthorization

Casymmetric key agreement

Dsingle sign-on

Question No: 8

MultipleChoice

A malicious passive intermediary intercepts messages sent between two services. Which option best is the main security concern raised by this situation?

Options

AThe integrity of the message can be affected.

BThe confidentiality of the message can be affected.

CThe reliability of the message can be affected.

DThe availability of the message can be affected.

Free Arcitura Education S90.19 Exam Dumps August 2026