Service A requires self-signed digital certificates from all of its service consumers. The service and its service consumers both belong to the same organization. You are presented with a new requirement to only allow access to those service consumers with certificates that have not expired. How can this requirement be addressed with minimal impacts on the current security architecture?
Answer(s): A
Service A requires certificates signed by a trusted certificate authority. The certificate authority publishes a Certificate Revocation List (CRL) on a frequent basis. As a result, some of the service consumers that were previously authorized to access Service A will not be able to after new CRLs are issued. How can this security requirement be enforced?
Answer(s): B
The services in a service inventory have all been built with compatible security technologies and mechanisms. Now, security policies are being introduced for the first time. How can security policies become part of the service inventory and its services while adhering to the application of the Standardized Service Contract principle?
Answer(s): D
The receiver of a message decrypts an encrypted message digest using the public key of the sender that corresponds to the private key. The receiver then matches it against the digest of the original message. If the decrypted digest and the newly calculated digest match, then what does it prove?
Answer(s): C,D
Using transport-layer security, an active intermediary that takes possession of a message can compromise:
Post your Comments and Discuss Arcitura Education S90.18 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the S90.18 content, but please register or login to continue.