Most Recent Arcitura Education S90.19 Exam Questions & Answers

Prepare for the Arcitura Education Advanced SOA Security exam with our extensive collection of questions and answers. These practice Q&A are updated according to the latest syllabus, providing you with the tools needed to review and test your knowledge.

QA4Exam focus on the latest syllabus and exam objectives, our practice Q&A are designed to help you identify key topics and solidify your understanding. By focusing on the core curriculum, These Questions & Answers helps you cover all the essential topics, ensuring you're well-prepared for every section of the exam. Each question comes with a detailed explanation, offering valuable insights and helping you to learn from your mistakes. Whether you're looking to assess your progress or dive deeper into complex topics, our updated Q&A will provide the support you need to confidently approach the Arcitura Education S90.19 exam and achieve success.

The questions for S90.19 were last updated on Dec 24, 2024.

Viewing page 1 out of 17 pages.
Viewing questions 1-5 out of 83 questions

Get All 83 Questions & Answers

Question No. 1

The Service Perimeter Guard pattern has been applied to help avoid denial of service attacks for a service inventory. As a result, services within the service inventory are only accessible via a perimeter service However, denial of service attacks continue to succeed and services within the service inventory become unavailable to external service consumers. What is the likely cause of this?

AThe application of the Service Perimeter Guard pattern needs to be combined with the application of the Message Screening pattern in order to mitigate denial of service attacks.

BThe perimeter service itself is the victim of denial of service attacks. As a result, none of the services inside the service inventory can be accessed by external service consumers.

CThe Trusted Subsystem pattern should have been applied so that each service has a dedicated trusted subsystem.

DThe Service Perimeter Guard pattern does not help avoid denial of service attacks.

Show Answer

Correct Answer: B

Question No. 2

The Trusted Subsystem pattern is applied to a service that provides access to a database. Select the answer that best explains why this service is still at risk of being subjected to an insufficient authorization attack.

AAttackers can steal confidential data by monitoring the network traffic that occurs between the service and the database.

BBecause the Service Perimeter Guard pattern was also not applied, the database is not protected by a firewall.

CIf an attacker gains access to the security credentials used by the service to access the database, the attacker can access the database directly.

DNone of the above.

Show Answer

Correct Answer: C

Question No. 3

An IT enterprise has three domain service inventories that map to three different departments. Each service inventory uses a security token service (STS) based authentication broker to enable single sign-on for services within the respective service inventory boundary. The tokens used for all single sign-on mechanisms are based on SAML assertions. You are given a new requirement to extend this security architecture so that services from different domain service inventories can communicate. What new security mechanisms are required to fulfill this requirement?

AThe individual authentication brokers need to be replaced with one single authentication broker so that one single token can be used by services across all domain service inventories.

BAn additional authentication broker needs to be added in between each domain service inventory in order to enable communication between services using disparate security tokens.

CThere is no need to introduce a new security mechanism. The individual domain service inventories need to be combined into a single enterprise service inventory. That way, the Service Perimeter Guard pattern can be applied so that services won't need to authenticate each other.

DThere is no need to introduce a new security mechanism. The existing SAML tokens can be used by services across the domain service inventories as long as the existing authentication brokers are configured to issue service inventory-specific assertions for SAML tokens from specific domain service inventories.

Show Answer

Correct Answer: D

Question No. 4

Service A is an agnostic service that is part of a complex service composition that relies on the use of several intermediaries for message routing purposes. Due to a recent malicious intermediary attack, public key cryptography and digital signatures have been added to Service A . Subsequently, the attacks stop. However, legitimate service consumers are experiencing latency when interacting with services from this complex service composition. Following an investigation, it is discovered that Service A has increased its system resource consumption in order to perform its new security-related functions. How can you improve Service A's performance without compromising its security requirements and without introducing new security mechanisms?

AUse symmetric encryption in combination with the Service Perimeter Guard pattern and SAML tokens.

BUse key agreement security sessions by deriving different keys from a session key for signing as well as encryption.

CUse base 64 encoded certificates in order to provide integrity and confidentiality.

DNone of the above.

Show Answer

Correct Answer: B

Question No. 5

The same security policy has been redundantly implemented as part of the service contracts for Web services A, B and C. In order to reduce the effort of maintaining multiple redundant service policies, it has been decided to centralize policy enforcement across these three services. Which of the following industry standards will need to be used for Web services A, B and C in order for their service contracts to share the same security policy document?

AWS-PolicyAttachment

BWS-SecureConversation

CWS-Trust

DWS-Security

Show Answer

Correct Answer: A

Unlock All Questions for Arcitura Education S90.19 Exam

Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits

Get All 83 Questions & Answers