Service A carries out XML canonicalization and creates a message digest. It then encrypts the message digest using asymmetric encryption. Service B. upon receiving the message, decrypts the message hash and calculates the hash of the original message. However, upon comparison, the received message digest and the calculated message digest do not match. How can this problem be avoided?
Answer(s): B
A service consumer submits a message with security credentials to an authentication broker, which authenticates the credentials against a central identity store. The authentication broker then responds with a token that the service consumer can use to access Services A, B, and C (none of which have their own identity store). This scenario demonstrates the application of which pattern?
Answer(s): D
The application of the Service Abstraction principle can hinder your ability to fully determine how a service composition is secured because you may not be able to find out how all composed services are secured.
Answer(s): A
As part of Service Composition A, a service consumer needs to authenticate itself to four different services. The Direct Authentication pattern was applied to each of these four services, all of which share the same identity store. This identity store is also shared by a number of additional services. As a result of increased usage, the identity store has become a performance bottleneck. The resulting performance degradation is impacting Service Composition A to the extent that it is causing problems. The security architecture for Service Composition A needs to be improved in order to avoid further performance degradation. However, any changes to the service composition architecture cannot break any dependencies with the existing service consumer. Which of the following approaches fulfills these requirements?
The application of the Service Autonomy principle is always negatively affected when applying the Data Confidentiality pattern together with the Data Origin Authentication pattern.
Post your Comments and Discuss Arcitura Education S90.18 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the S90.18 content, but please register or login to continue.