S90.18 試験問題を無料オンラインアクセス

Atypical SAML assertion will contain at least one of the following subject statements:

• A.authorization decision statement
• B.attribute statement
• C.certificate authority issuer statement
• D.authentication statement

The communication between two services operating within the same organization needs to
be protected using message-layer security. These services are only used within the
organizational boundary. The question is raised as to whether to use self-signed
certificates or certificates signed by a certificate authority. A security specialist states that
only certificates signed by an external certificate authority can be used to fulfill this security
requirement. Is this correct?

• A.No
• B.Yes

The more _____________ the security architecture is across services, the more
____________the service composition architecture.

• A.standardized, vendor-centric
• B.centralized, inflexible
• C.centralized, vendor-neutral
• D.standardized, flexible

Service A relies on a shared identity store. Service B has its own identity store. Service C
also has its own identity store, but must also access the shared identity store used by
Service A.
Which service has the least reduction in autonomy as a result of its relationship with identity store mechanism(s)?

• A.Service A
• B.Service C
• C.The autonomy of all services is affected equally
• D.Service B

Losing a ______________ does not compromise the identity of the key owner, whereas
losing a ___________ does compromise the identity of the key owner.

• A.security policy, SAML token
• B.validated certificate, revoked certificate
• C.None of the above
• D.private key, public key