S90.18 試験問題を無料オンラインアクセス

Which of the following industry standards enable non-repudiation?

• A.SAML
• B.XML-Encryption
• C.XML-Signature
• D.None of the above

The requirement to defer security related state data at runtime relates directly to the
application of which service-orientation principle?

• A.Service Autonomy
• B.None of the above.
• C.Service Loose Coupling
• D.Service Abstraction

Service A relies on a shared identity store. Service B has its own identity store. Service C
also has its own identity store, but must also access the shared identity store used by
Service A.
Which service has the least reduction in autonomy as a result of its relationship with identity store mechanism(s)?

• A.Service A
• B.Service C
• C.The autonomy of all services is affected equally
• D.Service B

You are required to design an authorization mechanism for a REST service. The service
provides functionality by providing access to different resources, some of which are local to
the service while others are located on remote servers. You are required to restrict access
to the service based on which resource is requested and which HTTP method has been
specified by the service consumer. By doing so, which combination of action control rules
needs to be used?

• A.identity and environment
• B.action and identity
• C.resource and action
• D.environment and resource

You are required to design security mechanisms to enable secure message exchanges
between different domain service inventories within the same organization. This needs to
be documented in the design specification for which type of service-oriented architecture?

• A.service architecture
• B.service composition architecture
• C.service-oriented enterprise architecture
• D.service inventory architecture