S90.18試験無料問題集（100題）「SOA Fundamental SOA Security 認定」

出題：1

Which of the following approaches represents a valid means of utilizing generic security
logic?

A. All of the above.

B. When required, generic security logic can be embedded within a service. The close
proximity to the service logic maximizes the chances that the security logic will be
consistently executed without interference from attackers.

C. When required, generic security logic can be abstracted into a service agent. This allows
for reuse and the security logic can be executed in response to runtime events.

D. When required, generic security logic can be abstracted into a separate utility service.
This allows for reuse.

正解：A 解答を投票する

出題：2

Security mechanisms that are based on vendor-specific security technology will always
decrease the autonomy of services that are required to use these security mechanisms.

A. True

B. False

正解：B 解答を投票する

出題：3

A valid signature issued by a certificate authority provides a guarantee that:

A. the certificate authority can be trusted

B. the certificate is being used for an authorized purpose

C. None of the above.

D. the certificate is not expired

正解：C 解答を投票する

出題：4

As a requirement for accessing Service B, Service A needs to encrypt its request message.
Service B decrypts the message, makes some changes, encrypts the message, and then
forwards it to Service C.
However, the message does not make it to Service C.
Instead, a runtime error is raised by a service agent that does not support encryption. This service
agent only requires access to the message header in order to route the message to the
appropriate instance of Service C.
It is therefore decided that the header part of the message will not be encrypted. Which of the following can be used to address this
requirement?

A. certificate authority

B. None of the above

C. non-repudiation

D. SAML

正解：B 解答を投票する

出題：5

A certificate authority is generally responsible for

A. receiving notifications about the loss of private keys

B. signing certificates that bind a public key to authenticate identity information about the
key holder

C. authenticating the identity of an entity requesting a certificate

D. publishing information about revoked certificates

正解：A,B,C,D 解答を投票する

出題：6

Symmetric and asymmetric encryption keys are always created in pairs.

A. True

B. False

正解：B 解答を投票する

出題：7

Service A requires certificates signed by a trusted certificate authority. The certificate
authority publishes a Certificate Revocation List (CRL) on a frequent basis. As a result,
some of the service consumers that were previously authorized to access Service A will not
be able to after new CRLs are issued. How can this security requirement be enforced?

A. Using certificates in such a scenario is not a valid option.

B. A human security administrator needs to check the validity of each certificate with the
certificate authority whenever Service A is accessed.

C. None of the above

D. An intermediary can check against the CRL to determine whether a certificate provided
by a service consumer is still valid.

正解：D 解答を投票する

出題：8

The services within a domain service inventory provide access to confidential data
retrieved from a shared database. These services need to be accessible from outside the
domain service inventory. Which of the following design options will preserve the
confidentiality of the data when the services are accessed from outside the service
inventory?

A. The Direct Authentication pattern is applied to the database used by the services that
need to be externally accessed.

B. The messages exchanged by the services are designed to include security tokens.

C. A dedicated database is created to store the confidential data. This database will only be
used by the services that need to be externally accessed.

D. None of above

正解：D 解答を投票する

出題：9

A service that was previously using a shared identity store is now given its own dedicated
identity store instead. What are the likely impacts (positive or negative) that will result from
this change?

A. The potential to apply the Service Abstraction principle is increased.

B. The service's autonomy is increased.

C. The operational responsibility is increased due to the need to keep the dedicated identity
store in synch with a parent identity store.

D. The service will no longer be dependent on a certificate authority.

正解：B,C 解答を投票する

出題：10

The communication between two services operating within the same organization needs to
be protected using message-layer security. These services are only used within the
organizational boundary. The question is raised as to whether to use self-signed
certificates or certificates signed by a certificate authority. A security specialist states that
only certificates signed by an external certificate authority can be used to fulfill this security
requirement. Is this correct?

A. No

B. Yes

正解：A 解答を投票する

S90.18試験無料問題集「SOA Fundamental SOA Security 認定」