Latest S90.19A Practice Tests with Actual Questions

Get Complete pool of questions with Premium PDF and Test Engine

Exam Code : S90.19A
Exam Name : Advanced SOA Security
Vendor Name :
"SOA"

Download Full Version of S90.19A

---

SOA

S90.19A

Advanced SOA Security

https://killexams.com/pass4sure/exam-detail/S90.19A

Question: 72

Service A is a Web service with an implementation that uses managed code. To perform a graphics-related operation, this managed code needs to access a graphics function that exist as unmanaged code. A malicious service consumer sends a message to Service A containing a very large numeric value. This value is forwarded by Service A' s logic to the graphics function. As a result, the service crashes and becomes unavailable. The service consumer successfully executed which attack?

1. Buffer overrun attack

2. Exception generation attack

3. XML parser attack

4. None of the above

Answer: A

Question: 73

Service A retrieves data from third-party services that reside outside the organizational boundary. The quality of the data provided by these third-party services is not guaranteed. Service A contains exception shielding logic that checks all outgoing messages. It is discovered that service consumers are still sometimes receiving malicious content from Service A. Because digital signatures are being used, it is confirmed that Service A is, in fact, the sender of these messages and that the messages are not being altered by any intermediaries. Why do messages from Service A continue to contain malicious content?

1. Messages received from third-party services are the likely source of the malicious content.

2. Digital signatures alone are not sufficient. They need to be used in conjunction with asymmetric encryption in order to ensure that no intermediary can alter messages.

3. Exception shielding logic needs to be used in conjunction with asymmetric encryption in order to guarantee that malicious content is not spread to service consumers.

4. None of the above.

Answer: A

Question: 74 24

When applying the Exception Shielding pattern, which of the following are valid options for implementing exception shielding logic?

1. as part of the core service logic

2. within a service agent

3. within a utility service

4. All of the above.

Answer: D

Question: 75

A malicious passive intermediary intercepts messages sent between two services. Which of the following is the primary security concern raised by this situation?

1. The integrity of the message can be affected.

2. The confidentiality of the message can be affected.

3. The reliability of the message can be affected.

4. The availability of the message can be affected.

Answer: B

Question: 76

Designing security policies with is an extension of the SOA characteristic that supports interoperability and avoids .

1. industry standards, business-driven, vendor lock-out

2. industry standards, vendor-neutral, vendor lock-in

3. design standards, composition-centric, vendor lock-in

4. design standards, enterprise-centric, vendor lock-in

Answer: B

Question: 77

The application of the Trusted Subsystem pattern can help centralize access to services.

1. True

2. False

25

Answer: A

Question: 78

A service protected from an XML bomb attack will automatically also be protected from a schema poisoning attack.

1. True

2. False

Answer: B

Question: 79

A service receives a message containing an XML document that expands to a very large size as it is processed by the parser. As a result, the service becomes unavailable to service consumers. The service was subjected to which type of attack?

1. XML parser attack

2. Exception generationattack

3. XPath injection attack

4. None of the above.

Answer: A

Question: 80

An attacker is able to gain access to a service and invokes the service. Upon executing the service logic, the attacker is able to gain access to underlying service resources, including a private database. The attacker proceeds to delete data from the database. The attacker has successfully executed which type of attack?

1. exception generation attack

2. insufficient authorization attack

3. denial of service attack

4. None of the above.

Answer: B

Question: 81

The application of the Trusted Subsystem pattern directly supports the goals of the Service Loose Coupling principle.

1. True

2. False

Answer: A

Question: 82

Service A is only authorized to access one service capability of Service B. Service B acts as a trusted subsystem for several underlying resources which it accesses using its own set of credentials. Service B can therefore not become a victim of an insufficient authorization attack initiated by Service A.

1. True

2. False

Answer: B

Question: 83

The use of derived keys is based on symmetric encryption. This is similar to asymmetric encryption because different keys can be derived from a session key and used separately for encryption and decryption.

1. True

2. False

Answer: B

User: Tiarna***** I am not a fan of online resources like killexams.com because They are often published by untrustworthy individuals who mislead me into studying things I do not need and missing things I should be focusing on. However, killexams.com Questions and Answers is completely trustworthy and helped me overcome my s90.19a exam preparation. I passed this exam on the second attempt and scored 87% marks. Thank you, killexams.com.

User: Rostisla***** Thanks to killexams.com, I passed the s90.19a exam. The questions, topics, and practice tests were accurate. The format of the exam was convenient and flexible, allowing me to practice in various formats. I especially enjoyed using the exam simulator, which completely simulated the actual exam and was vital for the s90.19a exam. I will continue to use killexams.com for my future certification exams.

User: Advik***** I have renewed my membership with killexams.com for the SOA s90.19a exam because their assistance is vital to my success. I am confident that their practice exams will help me obtain my accreditation and secure more than 95% marks. The team at killexams.com is doing an outstanding job, and I hope they continue to maintain their high standards.

User: Tina***** The S90.19A exam is a highly respected certification that I have been dreaming of achieving for some time. However, due to my busy schedule, I found it challenging to make time for test preparation. Thankfully, I discovered the helpful S90.19A Questions and Answers, which made exam preparation practical and accessible. With the user-friendly layout and accurate questions, I was able to even study while driving to work and managed to achieve my dream certification.

User: Taisiya***** I scored 99% in the S90.19A exam, and I owe it all to the questions and answers provided by Killexams.com. Within just 15 days of preparation, I was able to master even the most difficult topics, thanks to their clear and comprehensive study guide. I hope that Killexams.com continues to develop similar courses for other IT certification exams, as their material is unparalleled.

---