SOA SOACP S90-19A Questions & Answers

• Question 61:

  The Exception Shielding pattern can be applied together with the Trusted Subsystem pattern.

  A. True

  B. False

  Correct Answer: A

• Question 62:

  A malicious active intermediary intercepts a message sent between two services. What concerns are raised by such an attack?

  A. The integrity of the message can be compromised

  B. The confidentiality of the message can be compromised

  C. the message can be routed to a different destination

  D. All of the above.

  Correct Answer: D

• Question 63:

  A denial of service attack can be the byproduct of an insufficient authorization attack.

  A. True

  B. False

  Correct Answer: A

• Question 64:

  A service composition is made up of services from a particular domain service inventory. All of the services belonging to the domain service inventory are deployed on the same server. Service A is part of the same domain inventory but is not part of this service composition. Service A becomes a victim of an XML parser attack resulting in its unavailability. However, because the services in the service composition rely on the same XML parser used by Service A. the service composition can also be affected by this attack.

  A. True

  B. False

  Correct Answer: A

• Question 65:

  The service contract for Service A uses an XML schema that does not specify the maximum length for the CustomerAddress XML element. A service consumer sends a message that contains a very long string of characters inside the CustomerAddress XML element.

  This can be an indication of what types of attacks?

  A. XML parser attack

  B. Buffer overrun attack

  C. Insufficient authorization attack

  D. XPath injection attack

  Correct Answer: AB

• Question 66:

  The Service Perimeter Guard pattern can be applied together with the Message Screening pattern, resulting in a perimeter service that contains message screening logic.

  A. True

  B. False

  Correct Answer: A

• Question 67:

  SAML assertions are smaller than certificates and they do not require access to any remote system for verification purposes.

  A. True

  B. False

  Correct Answer: B

• Question 68:

  The exception shielding logic resulting from the application of the Exception Shielding pattern can be centralized by applying which additional pattern?

  A. Message Screening

  B. Trusted Subsystem

  C. Service Perimeter Guard

  D. None of the above.

  Correct Answer: C

• Question 69:

  The Trusted Subsystem pattern is applied to a service that provides access to a database. Select the answer that best explains why this service is still at risk of being subjected to an insufficient authorization attack.

  A. Attackers can steal confidential data by monitoring the network traffic that occurs between the service and the database.

  B. Because the Service Perimeter Guard pattern was also not applied, the database is not protected by a firewall.

  C. If an attacker gains access to the security credentials used by the service to access the database, the attacker can access the database directly.

  D. None of the above.

  Correct Answer: C

• Question 70:

  Which of the following can directly contribute to making a service composition architecture more vulnerable to attacks?

  A. Reliance on intermediaries

  B. Reliance on transport-layer security

  C. Reliance on open networks

  D. All of the above

  Correct Answer: D