Online Access Free S90.19 Exam Questions

Service A contains a comprehensive message screening routine that can consume a lot of system resources. Service consumers are reporting that sometimes Service A becomes non-responsive, especially after it receives a message containing a large amount of content. This may be an indication of which types of attacks?

• A.XPath injection
• B.XML parser attack
• C.Denial of service attack
• D.Insufficient authorization

A service is designed to respond to an error condition by issuing a message containing detailed error information. This message includes connection information for a database that is shared by numerous services within the service inventory. An attacker intentionally sends an invalid message to the service in order to trigger an error and receive the connection information. The attacker then proceeds to connect to the database and issues a series of malicious SQL queries that make the database non-responsive. As a result, a number of services within the service inventory are disabled. Which of the following types of attacks were successfully carried out?

• A.SQL injection attack
• B.Denial of service attack
• C.Exception generation attack
• D.Buffer overrun attack

The application of the Service Loose Coupling principle does not relate to the use of security policies as part of service contracts.

• A.True
• B.False

Security policies defined using WS-SecurityPolicy can be used to convey which of the following requirements to a service consumer?

• A.The encryption type that needs to be used for transport-layer security
• B.The algorithms that need to be used for cryptographic operations
• C.Whether transport-layer or message-layer security needs to be used
• D.The type of security token that must be used

Which of the following can directly contribute to making a service composition architecture more vulnerable to attacks?

• A.Reliance on open networks
• B.Reliance on transport-layer security
• C.All of the above
• D.Reliance on intermediaries