SOA S90.20 - SOA Security Lab Exam
Page: 3 / 6
Total 30 questions
Question #11 (Topic: )
Service A has two specific service consumers, Service Consumer A and Service Consumer
B (1). Both service consumers are required to provide security credentials in order for
Service A to perform authentication using an identity store (2). If a service consumer's
request message is successfully authenticated, Service A processes the request by
exchanging messages with Service B (3) and then Service C (4). With each of these
message exchanges, Service A collects data necessary to perform a query against
historical data stored in a proprietary legacy system. Service A's request to the legacy
system must be authenticated (5). The legacy system only provides access control using a
single account. If the request from Service A is permitted, it will be able to access all of the
data stored in the legacy system. If the request is not permitted, none of the data stored in
the legacy system can be accessed. Upon successfully retrieving the requested data (6),
Service A generates a response message that is sent back to either Service Consumer A
or B.
The legacy system is also used independently by Service D without requiring any
authentication. Furthermore, the legacy system has no auditing feature and therefore
cannot record when data access from Service A or Service D occurs. If the legacy system
encounters an error when processing a request, it generates descriptive error codes.
[SOA-S90.20-6.0/SOA-S90.20-21_2.png]
This service composition architecture needs to be upgraded in order to fulfill the following
new security requirements: 1. Service Consumers A and B have different permission
levels, and therefore, response messages sent to a service consumer must only contain
data for which the service consumer is authorized. 2. All data access requests made to the
legacy system must be logged. 3. Services B and C must be provided with the identity of
Service A's service consumer in order to provide Service A with the requested data. 4.
Response messages generated by Service A c
B (1). Both service consumers are required to provide security credentials in order for
Service A to perform authentication using an identity store (2). If a service consumer's
request message is successfully authenticated, Service A processes the request by
exchanging messages with Service B (3) and then Service C (4). With each of these
message exchanges, Service A collects data necessary to perform a query against
historical data stored in a proprietary legacy system. Service A's request to the legacy
system must be authenticated (5). The legacy system only provides access control using a
single account. If the request from Service A is permitted, it will be able to access all of the
data stored in the legacy system. If the request is not permitted, none of the data stored in
the legacy system can be accessed. Upon successfully retrieving the requested data (6),
Service A generates a response message that is sent back to either Service Consumer A
or B.
The legacy system is also used independently by Service D without requiring any
authentication. Furthermore, the legacy system has no auditing feature and therefore
cannot record when data access from Service A or Service D occurs. If the legacy system
encounters an error when processing a request, it generates descriptive error codes.
[SOA-S90.20-6.0/SOA-S90.20-21_2.png]
This service composition architecture needs to be upgraded in order to fulfill the following
new security requirements: 1. Service Consumers A and B have different permission
levels, and therefore, response messages sent to a service consumer must only contain
data for which the service consumer is authorized. 2. All data access requests made to the
legacy system must be logged. 3. Services B and C must be provided with the identity of
Service A's service consumer in order to provide Service A with the requested data. 4.
Response messages generated by Service A c
A. To correctly enforce access privileges, Services B and C must share the identity store with Service A and directly authenticate Service Consumer A or B. Furthermore, Services B and C must each maintain two policies: one for Service Consumer A and one for Service Consumer B. After receiving a request message from a Service A. Services B and C must evaluate the validity of the request by using the identity store and the appropriate policy. Service Consumers A and B are required to submit the neces
B. Apply the Trusted Subsystem pattern by introducing a new utility service that encapsulates data access to the legacy system. After Service A authenticates a service consumer it creates a signed SAML assertion containing authentication and authorization information. The SAML assertions are used by Service A to convey the identity information of Service Consumer A or B to Services B and C. The utility service filters response messages to the service consumer based on the information in the SAML as
C. Apply the Service Perimeter Guard pattern to provide selective access privileges to Service Consumers A and B. The resulting perimeter service shares the identity store with Service A, which it uses to authenticate each request message. If authentication is successful, the request message is forwarded to Service A. Service A then also authenticates the service consumer and retrieves the service consumer's security profile from the identity store upon successful authentication. Each service consu
D. Apply the Trusted Subsystem pattern by introducing a new utility service that encapsulates data access to the legacy system. The utility service evaluates request messages by authenticating the service consumer against the identity store and also verifying the digital signature of each request. If the request is permitted, Service A forwards the service consumer's credentials to Services B and C, and to the legacy system. The response messages from Services B and C are returned to Service A, whi
Answer: B
Question #12 (Topic: )
Service A provides a customized report generating capability. Due to infrastructure
limitations, the number of service consumers permitted to access Service A concurrently is
strictly controlled. Service A validates request messages based on the supplied credentials
(1). If the authentication of the request message is successful, Service A sends a message
to Service B (2) to retrieve the required data from Database A (3). Service A stores the
response from Service B (4) in memory and then issues a request message to Service C
(5). Service C retrieves a different set of data from Database A (6) and sends the result
back to Service A (7). Service A consolidates the data received from Services B and C and
sends the generated report in the response message to the service consumer (8).
[SOA-S90.20-6.0/SOA-S90.20-23_2.png]
It has been discovered that attackers have been gaining access to confidential data
exchanged between Service A and Service B, and between Service A and its service
consumers. What changes can be made to this service composition architecture in order to
counter this threat?
limitations, the number of service consumers permitted to access Service A concurrently is
strictly controlled. Service A validates request messages based on the supplied credentials
(1). If the authentication of the request message is successful, Service A sends a message
to Service B (2) to retrieve the required data from Database A (3). Service A stores the
response from Service B (4) in memory and then issues a request message to Service C
(5). Service C retrieves a different set of data from Database A (6) and sends the result
back to Service A (7). Service A consolidates the data received from Services B and C and
sends the generated report in the response message to the service consumer (8).
[SOA-S90.20-6.0/SOA-S90.20-23_2.png]
It has been discovered that attackers have been gaining access to confidential data
exchanged between Service A and Service B, and between Service A and its service
consumers. What changes can be made to this service composition architecture in order to
counter this threat?
A. Apply the Service Perimeter Guard pattern in order to protect message exchanges between Service A and its service consumers. Apply the Direct Authentication pattern in order to protect message exchanges between Service A and Service B.
B. Apply the Direct Authentication pattern in order to protect message exchanges between Service A and its service consumers and between Service A and Service B. This approach will establish a password-based authentication mechanism that relies on a local identity store and will therefore prevent access by attackers.
C. Apply the Data Origin Authentication pattern to protect the final report sent by Service A to its service consumer. Service A can generate a message digest of the final report, after which it can sign the digest with its own private key. It then can send both the final report and the signed message digest to its service consumer. This service consumer can generate its own message digest, decrypt the signed digest using the public key of Service A (which proves that Service A sent the message), a
D. None of the above
Answer: D
Question #13 (Topic: )
Service Consumer A sends a request message to Service A (1), after which Service A
sends a request message with security credentials to Service B (2). Service B
authenticates the request and, if the authentication is successful, writes data from the
request message into Database B (3). Service B then sends a request message to Service
C (4), which is not required to issue a response message. Service B then sends a
response message back to Service A (5). After processing Service B's response, Service A
sends another request message with security credentials to Service B (6). After
successfully authenticating this second request message from Service A, Service B sends
a request message to Service D (7). Service D is also not required to issue a response
message. Finally, Service B sends a response message to Service A (8), after which
Service A records the response message contents in Database A (9) before sending its
own response message to Service Consumer A (10).
[SOA-S90.20-6.0/SOA-S90.20-24_2.png]
To use Service A, Service Consumer A is charged a per usage fee. The owner of Service
Consumer A has filed a complaint with the owner of Service A, stating that the bills that
have been issued are for more usage of Service A than Service Consumer A actually used.
Additionally, it has been discovered that malicious intermediaries are intercepting and
modifying messages being sent from Service B to Services C and D. Because Services C
and D do not issue response messages, the resulting errors and problems were not
reported back to Service B.
Which of the following statements describes a solution that correctly addresses these
problems?
sends a request message with security credentials to Service B (2). Service B
authenticates the request and, if the authentication is successful, writes data from the
request message into Database B (3). Service B then sends a request message to Service
C (4), which is not required to issue a response message. Service B then sends a
response message back to Service A (5). After processing Service B's response, Service A
sends another request message with security credentials to Service B (6). After
successfully authenticating this second request message from Service A, Service B sends
a request message to Service D (7). Service D is also not required to issue a response
message. Finally, Service B sends a response message to Service A (8), after which
Service A records the response message contents in Database A (9) before sending its
own response message to Service Consumer A (10).
[SOA-S90.20-6.0/SOA-S90.20-24_2.png]
To use Service A, Service Consumer A is charged a per usage fee. The owner of Service
Consumer A has filed a complaint with the owner of Service A, stating that the bills that
have been issued are for more usage of Service A than Service Consumer A actually used.
Additionally, it has been discovered that malicious intermediaries are intercepting and
modifying messages being sent from Service B to Services C and D. Because Services C
and D do not issue response messages, the resulting errors and problems were not
reported back to Service B.
Which of the following statements describes a solution that correctly addresses these
problems?
A. The Data Confidentiality and Data Origin Authentication patterns need to be applied in order to establish message-layer confidentiality and integrity for messages sent to Services C and D. The Direct Authentication pattern can be applied to require that service consumer be authenticated in order to use Service A.
B. Messages sent to Services C and D must be protected using transport-layer encryption in order to ensure data confidentiality. Service consumers of Service A must be authenticated using X.509 certificates because they can be reused for several request messages.
C. Apply the Service Perimeter Guard and the Message Screening patterns together to establish a perimeter service between Service Consumer A and Service A. The perimeter service screens and authenticates incoming request messages from Service Consumer A. After successful authentication, the perimeter service generates a signed SAML assertion that is used by the subsequent services to authenticate and authorize the request message and is also carried forward as the security credential included in me
D. Apply the Brokered Authentication to establish an authentication broker between Service Consumer A and Service A that can carry out the Kerberos authentication protocol. Before invoking Service A, Service Consumer A must request a ticket granting ticket and then it must request service granting tickets to all services in the service composition, including Services C and D. Messages sent by Service B to Services C and D must further be encrypted with the public key of Service Consumer A.
Answer: A
Question #14 (Topic: )
Service A exchanges messages with Service B multiple times during the same runtime
service activity. Communication between Services A and B has been secured using
service activity. Communication between Services A and B has been secured using
A. Eliminate the need to retrieve the public key from the Certificate Authority and to verify the certificate revocation information by extending the service contract of Service B to accept certificates only from pre-registered Certificate Authorities. This form of pre- registration ensures that Service B has the public key of the corresponding Certificate Authority.
B. Add a service agent to screen messages sent from Service A to Service B. The service agent can reject any message containing malicious content so that only verified messages are passed through to Service B. Instead of using X.509 certificates, use WS- SecureConversation sessions. Service A can request a Security Context Token (SCT) from a Security Token Service and use the derived keys from the session key to secure communication with Service B. Service B retrieves the session key from the Secur
C. Apply the Trusted Subsystem pattern by introducing a new utility service between Service A and Service B. When Service A sends request messages, the utility service verifies the provided credentials and creates a customized security profile for Service A. The security profile contains authentication and access control statements that are then inherited by all subsequent request messages issued by Service A. As a result, performance is improved because Service A does not need to resubmit any addi
D. Apply the Trusted Subsystem pattern to by introducing a new utility service. Because Service B is required to limit the use of external resources. Service A must ensure that no other services can request processing from Service B in order to prevent malicious content from infiltrating messages. This is achieved by creating a dedicated replica of Service B to be used by the utility service only. Upon receiving the request message and the accompanying security credentials from Service A. the utili
Answer: B
Question #15 (Topic: )
Service Consumer A sends a request message with a Username token to Service A (1).
Service B authenticates the request by verifying the security credentials from the
Username token with a shared identity store (2). To process Service Consumer A's request
message, Service A must use Services B, C, and D. Each of these three services also
requires the Username token (3. 6, 9) in order to authenticate Service Consumer A by
using the same shared identity store (4, 7, 10). Upon each successful authentication, each
of the three services (B, C, and D) issues a response message back to Service A (5, 8, 11).
Upon receiving and processing the data in all three response messages, Service A sends
its own response message to Service Consumer A (12).
[SOA-S90.20-6.0/SOA-S90.20-28_2.png]
You are asked to redesign this service composition architecture so that it can still carry out
the described message exchanges while requiring that Service Consumer A only be
authenticated once using the identity store.
Which of the following statements describes an accurate solution?
Service B authenticates the request by verifying the security credentials from the
Username token with a shared identity store (2). To process Service Consumer A's request
message, Service A must use Services B, C, and D. Each of these three services also
requires the Username token (3. 6, 9) in order to authenticate Service Consumer A by
using the same shared identity store (4, 7, 10). Upon each successful authentication, each
of the three services (B, C, and D) issues a response message back to Service A (5, 8, 11).
Upon receiving and processing the data in all three response messages, Service A sends
its own response message to Service Consumer A (12).
[SOA-S90.20-6.0/SOA-S90.20-28_2.png]
You are asked to redesign this service composition architecture so that it can still carry out
the described message exchanges while requiring that Service Consumer A only be
authenticated once using the identity store.
Which of the following statements describes an accurate solution?
A. A single sign-on mechanism is implemented. The Brokered Authentication pattern is applied, resulting in Service A becoming the authentication broker. The authentication broker authenticates the security credentials received from Service Consumer A against the identity store. After successful authentication, the authentication broker issues a signed SAML token for Service Consumer A. The SAML token is subsequently provided to Services B.C. and D by Service A, on behalf of Service Consumer A.
B. A single sign-on mechanism is implemented. The Brokered Authentication pattern is applied together with the Data Origin Authentication pattern. A separate authentication broker utility service is added in between Service Consumer A and Service A. This requires that Service A send its Username token only once to Service B. Service B then acts as a secondary authentication broker and authenticates Service Consumer A and Service A using the identity store. If the authentication is successful, Servi
C. A single sign-on mechanism is implemented. The Brokered Authentication pattern is applied together with the Data Origin Authentication pattern. Service A is redesigned to use holder-of-key based subject confirmation SAML assertions. This way, Service A only needs to send its Username token once to Service B. Service B then acts as the authentication broker by issuing a SAML token to Service A and then further sends the SAML token to Services C and D on behalf of Service Consumer A and Service A.
D. The Direct Authentication pattern is applied together with an authentication process that uses digital certificates and digital signatures instead of Username tokens. The digital certificate of Service Consumer A is attached to all subsequent request messages issued by Services A, B, C and D and these request messages are further signed by a private key.
Answer: A
