S90.18 Fundamental SOA Security Questions and Answers

The application of the Service Composability principle dictates that services acting as composition members be designed to establish and propagate a security context to other composition members, while services acting as composition controllers be designed so that they are prepared to join a security context already in progress rather than carrying out authentication themselves.

A hashing function always returns _____________ for the same input data.

Which of the following SOA characteristics relate to the use of security mechanisms that support the reuse of services as part of multiple service compositions?

Service A hashes a message, resulting in message digest X. Service A encrypts the message digest X with its private key, resulting ir ciphertext X1. Service A sends the message and X1 to Service B. Service B hashes the message, resulting in message digest Y. Service B decrypts X1 with Service A's public key, recovering message digest X. Service B compares Y with X and finds them to be equal. This proves that:

Which of the following approaches represents a valid means of utilizing generic security logic?

Security mechanisms that are based on vendor-specific security technology will always decrease the autonomy of services that are required to use these security mechanisms.

Service A requires self-signed digital certificates from all of its service consumers. The service and its service consumers both belong to the same organization. You are presented with a new requirement to only allow access to those service consumers with certificates that have not expired. How can this requirement be addressed with minimal impacts on the current security architecture?

In order to express the order in which a message is signed and encrypted, the _________ industry standard can be used.

The application of the Service Composability principle can be supported by the application of the Brokered Authentication pattern.

Which of the following are valid security considerations specific to the application of the Service Autonomy principle?

A set of services within a service inventory were originally each designed with a dedicated identity store. To reduce the need for service consumers to repeatedly authenticate themselves when having to access multiple services, a new ___________ has been added along with a____________.