최신SOA Advanced SOA Security - S90.19무료샘플문제
문제1
The application of the Trusted Subsystem pattern directly supports the goals of the Service Loose Coupling principle.
The application of the Trusted Subsystem pattern directly supports the goals of the Service Loose Coupling principle.
정답: A
문제2
When designing XML schemas to avoid data-centric threats, which of the following are valid considerations?
When designing XML schemas to avoid data-centric threats, which of the following are valid considerations?
정답: C,D
문제3
When applying the Exception Shielding pattern, which of the following are valid options for implementing exception shielding logic?
When applying the Exception Shielding pattern, which of the following are valid options for implementing exception shielding logic?
정답: C
문제4
Which of the following can directly contribute to making a service composition architecture more vulnerable to attacks?
Which of the following can directly contribute to making a service composition architecture more vulnerable to attacks?
정답: B
문제5
Within a service composition, two Web services are using certificates in order to ensure message integrity and sender's authenticity. The certificates are included with every message exchange. Recently, the performance of these message exchanges has degraded. How can the performance be improved without compromising message integrity and message authenticity?
Within a service composition, two Web services are using certificates in order to ensure message integrity and sender's authenticity. The certificates are included with every message exchange. Recently, the performance of these message exchanges has degraded. How can the performance be improved without compromising message integrity and message authenticity?
정답: B
문제6
A legacy system is used as a shared resource by a number of services within a service inventory. The services that access the legacy system use the same user account. The legacy system is also directly accessed by other applications that also use the same set of credentials as the services. It was recently reported that a program gained unauthorized access to confidential data in the legacy system. However, because all of the programs that access the legacy system use the same set of credentials, it is difficult to find out which program carried out the attack. How can another attack like this be avoided?
A legacy system is used as a shared resource by a number of services within a service inventory. The services that access the legacy system use the same user account. The legacy system is also directly accessed by other applications that also use the same set of credentials as the services. It was recently reported that a program gained unauthorized access to confidential data in the legacy system. However, because all of the programs that access the legacy system use the same set of credentials, it is difficult to find out which program carried out the attack. How can another attack like this be avoided?
정답: A
문제7
Service A expresses its requirement for message-layer security to service consumers via a security policy. Since the launch of Service A, its popularity has grown and it is decided that a fee should be charged for its use. Consequently, the design of Service A is changed so that it is capable of keeping a log of all request messages received from service consumers. The fact that Service A is logging all incoming messages is something that can also be expressed via a policy.
Service A expresses its requirement for message-layer security to service consumers via a security policy. Since the launch of Service A, its popularity has grown and it is decided that a fee should be charged for its use. Consequently, the design of Service A is changed so that it is capable of keeping a log of all request messages received from service consumers. The fact that Service A is logging all incoming messages is something that can also be expressed via a policy.
정답: A
문제8
The use of derived keys is based on symmetric encryption. This is similar to asymmetric encryption because different keys can be derived from a session key and used separately for encryption and decryption.
The use of derived keys is based on symmetric encryption. This is similar to asymmetric encryption because different keys can be derived from a session key and used separately for encryption and decryption.
정답: B
문제9
The Message Screening pattern can be applied to a service acting as a trusted subsystem for an underlying database. That way, the database would be protected from SOL injection attacks.
The Message Screening pattern can be applied to a service acting as a trusted subsystem for an underlying database. That way, the database would be protected from SOL injection attacks.
정답: A