S90.19 試験問題を無料オンラインアクセス

The use of parameterized expressions can help avoid which type of attack?

• A.Exception generation attack
• B.Buffer overrun attack
• C.XPath injection attack
• D.XML parser attack

The Service Perimeter Guard pattern can be used in combination with other patterns to help avoid both data-oriented attacks and access-oriented attacks.

• A.False
• B.True

A malicious passive intermediary intercepts messages sent between two services. Which of the following is the primary security concern raised by this situation?

• A.The confidentiality of the message can be affected.
• B.The availability of the message can be affected.
• C.The reliability of the message can be affected.
• D.The integrity of the message can be affected.

Service A needs to be designed so that it supports message integrity and so that only part of the messages exchanged by the service are encrypted. You are asked to create the security policy for this service. What type of policy assertions should you use?

• A.Token assertions
• B.Service A's security requirements cannot be expressed in a policy
• C.Protection assertions
• D.Security binding assertions

The application of the Data Origin Authentication pattern and the Data Confidentiality pattern do not help mitigate the risk of malicious intermediary attacks.

• A.False
• B.True