S90.19 試験問題を無料オンラインアクセス

The application of the Service Perimeter Guard pattern establishes a perimeter service that hides internal services from unauthorized external service consumers. However, the perimeter service grants authorized external services direct access to internal services.

• A.False
• B.True

A service uses specialized logic to compare the size of a request message to the maximum allowable size that is specified for request messages. Upon a mismatch, the service triggers an error that results in the issuance of a message with detailed error information.
What type of attack does this specialized logic not help protect the service from?

• A.XML parser attack
• B.buffer overrun attack
• C.exception generation attack
• D.XPath injection attack

A malicious passive intermediary intercepts messages sent between two services. Which of the following is the primary security concern raised by this situation?

• A.The reliability of the message can be affected.
• B.The availability of the message can be affected.
• C.The integrity of the message can be affected.
• D.The confidentiality of the message can be affected.

Service A contains a comprehensive message screening routine that can consume a lot of system resources. Service consumers are reporting that sometimes Service A becomes non-responsive, especially after it receives a message containing a large amount of content. This may be an indication of which types of attacks?

• A.XML parser attack
• B.XPath injection
• C.Denial of service attack
• D.Insufficient authorization

The Message Screening pattern can be applied to a service acting as a trusted subsystem for an underlying database. That way, the database would be protected from SOL injection attacks.

• A.False
• B.True