Online Access Free S90.18 Practice Test

The use of XML-Encryption supports the application of the Service Abstraction principle
because the actual message remains hidden from the attacker.

• A.True
• B.False

As a requirement for accessing Service B, Service A needs to encrypt its request message.
Service B decrypts the message, makes some changes, encrypts the message, and then
forwards it to Service C.
However, the message does not make it to Service C.
Instead, a runtime error is raised by a service agent that does not support encryption. This service
agent only requires access to the message header in order to route the message to the
appropriate instance of Service C.
It is therefore decided that the header part of the message will not be encrypted. Which of the following can be used to address this
requirement?

• A.non-repudiation
• B.certificate authority
• C.None of the above
• D.SAML

Both the Brokered Authentication pattern and the Direct Authentication pattern advocate
the use of a central identity store.

• A.True
• B.False

Service A hashes a message using algorithm X.
which creates message digest X1. Service
B uses a different algorithm Y to create message digest Y1 of the same message. Which of
the following statements are true regarding the comparison of X1 and Y1?

• A.They do not match
• B.They can be swapped
• C.They are based on the same hashing algorithm
• D.They have fixed sizes

With SAML, the _____________ element is used by the relying party to confirm that a
given message came from the subject specified in the assertion.

• A.sign-on
• B.claim
• C.subject confirmation
• D.token