312-50V11 · Question #1003
Rebecca, a security professional, wants to authenticate employees who use web services for safe and secure communication. In this process, she employs a component of the Web Service Architecture…
The correct answer is D. WS-Security. WS-Security is the Web Service Architecture component that extends SOAP to provide message-level authentication, integrity, and confidentiality for secure web service communication.
Question
Options
- AWSDL
- BWS Work Processes
- CWS-Policy
- DWS-Security
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C3% (1)
- D87% (27)
Why each option
WS-Security is the Web Service Architecture component that extends SOAP to provide message-level authentication, integrity, and confidentiality for secure web service communication.
WSDL (Web Services Description Language) is an XML-based language that describes a web service's interface, operations, and endpoints, but provides no mechanism for authenticating users or securing SOAP message content.
WS Work Processes is not a recognized standard component of the Web Service Architecture security stack and does not provide message integrity or confidentiality for SOAP communications.
WS-Policy defines rules and capabilities for web service interactions such as required security tokens or transport protocols, but it describes policies rather than directly enforcing the encryption and authentication on SOAP messages the way WS-Security does.
WS-Security is an OASIS standard that extends the SOAP protocol by adding security headers to SOAP messages, supporting authentication tokens such as usernames and X.509 certificates. It preserves message integrity through XML digital signatures and ensures confidentiality through XML encryption, making it the correct component for authenticating employees and securing SOAP-based communication. WS-Security operates at the message level, so security is enforced end-to-end regardless of the underlying transport protocol.
Concept tested: WS-Security SOAP message integrity and confidentiality
Source: https://www.oasis-open.org/standards/#wssv1.1
Topics
Community Discussion
No community discussion yet for this question.