S90.19試験無料問題集（83題）「SOA Advanced SOA Security 認定」

出題：1

Which of the following are types of security sessions?

A. Authorization

B. asymmetric key agreement

C. Authentication

D. single sign-on

正解：C,D 解答を投票する

出題：2

Service A is a Web service that accesses the Student table in a shared database in order to store XML-based student records. When invoked, the GetStudent operation of Service A uses a StudentID value to retrieve the record of a single student by executing an XPath query. An attacker sends a malicious message that manipulates the XPath query to return all the student records. Which of the following attacks was carried out?

A. SQL injection attack

B. XPath injection attack

C. None of the above

D. XML parser attack

正解：B 解答を投票する

出題：3

A service protected from an XML bomb attack will automatically also be protected from a schema poisoning attack.

A. True

B. False

正解：B 解答を投票する

出題：4

The Service Perimeter Guard pattern can be used in combination with other patterns to help avoid both data-oriented attacks and access-oriented attacks.

A. True

B. False

正解：A 解答を投票する

出題：5

When considering the ESB as providing intermediary logic, which of the following types of subject confirmation methods relate to its access control issues?

A. Holder-of-key

B. Sender-vouches

C. Issuer-vouches

D. None of the above.

正解：B 解答を投票する

出題：6

As an SOA security specialist you are being asked to educate an IT team about how to best design security policies for a given set of services. Which of the following recommendations are valid?

A. security policies are defined by using WSDL and XML Schema industry standards together

B. security policies can be decoupled from service logic

C. security policies can be part of service contracts and are therefore subject to the Service Loose Coupling principle

D. common security requirements can be centralized into shared security policies

正解：B,C,D 解答を投票する

出題：7

A certain service becomes a victim of an insufficient authorization attack. This service acts as a trusted subsystem for an entire service inventory. Which of the following are under threat as a result of this attack?

A. The core service logic

B. The underlying resources accessed by the service

C. All of the above.

D. Other services in the service inventory

正解：C 解答を投票する

出題：8

An XML bomb attack and an XML external entity attack are both considered types of XML parser attacks.

A. True

B. False

正解：A 解答を投票する

S90.19試験無料問題集「SOA Advanced SOA Security 認定」