Free SOA S90.19 Exam Dumps Questions & Answers

A service protected from an XML bomb attack will automatically also be protected from a schema poisoning attack.

• A.  True
• B.  False

Because of a new security requirement, all messages received by Service A need to be logged. This requirement needs to be expressed in a policy that is part of Service A's service contract. However, the addition of this policy must not impact existing service consumers that have already formed dependencies on Service A's service contract. How can this be accomplished?

• A.  None of the above.
• B.  The policy can be expressed using a digital certificate that is added to the service contract.
• C.  The policy can be centralized and isolated into a separate policy document that is linked to the service contract.
• D.  The policy can be expressed using an ignorable policy assertion that is added to the service contract.

A malicious active intermediary intercepts a message sent between two services. What concerns are raised by such an attack?

• A.  The integrity of the message can be compromised
• B.  The confidentiality of the message can be compromised
• C.  All of the above.
• D.  the message can be routed to a different destination

Service A's logic has been implemented using unmanaged code. An attacker sends a message to Service A that contains specially crafted data capable of manipulating the quoting within a particular XPath expression. This results in the release of confidential information. Service A is a victim of which kind of attack?

• A.  XPath injection attack
• B.  None of the above.
• C.  Buffer overrun attack
• D.  Insufficient authorization attack

Which of the following statements is true?

• A.  When the xsd:any element is used within an XML schema it can introduce a security risk because it allows attackers to extend the schema.
• B.  When the maxOccurs attribute in an XML schema element is not specified it creates a security risk because attackers can specify this element multiple times.
• C.  When numeric ranges within an XML schema are not specified it creates a security risk because attackers can introduce very large numeric values within the message data.
• D.  All of above.