nerdexam
EC-Council

312-50V11 · Question #1003

Rebecca, a security professional, wants to authenticate employees who use web services for safe and secure communication. In this process, she employs a component of the Web Service Architecture…

The correct answer is D. WS-Security. WS-Security is the Web Service Architecture component that extends SOAP to provide message-level authentication, integrity, and confidentiality for secure web service communication.

Hacking Web Applications

Question

Rebecca, a security professional, wants to authenticate employees who use web services for safe and secure communication. In this process, she employs a component of the Web Service Architecture, which is an extension of SOAP, and it can maintain the integrity and confidentiality of SOAP messages. Which of the following components of the Web Service Architecture is used by Rebecca for securing the communication?

Options

  • AWSDL
  • BWS Work Processes
  • CWS-Policy
  • DWS-Security

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    3% (1)
  • D
    87% (27)

Why each option

WS-Security is the Web Service Architecture component that extends SOAP to provide message-level authentication, integrity, and confidentiality for secure web service communication.

AWSDL

WSDL (Web Services Description Language) is an XML-based language that describes a web service's interface, operations, and endpoints, but provides no mechanism for authenticating users or securing SOAP message content.

BWS Work Processes

WS Work Processes is not a recognized standard component of the Web Service Architecture security stack and does not provide message integrity or confidentiality for SOAP communications.

CWS-Policy

WS-Policy defines rules and capabilities for web service interactions such as required security tokens or transport protocols, but it describes policies rather than directly enforcing the encryption and authentication on SOAP messages the way WS-Security does.

DWS-SecurityCorrect

WS-Security is an OASIS standard that extends the SOAP protocol by adding security headers to SOAP messages, supporting authentication tokens such as usernames and X.509 certificates. It preserves message integrity through XML digital signatures and ensures confidentiality through XML encryption, making it the correct component for authenticating employees and securing SOAP-based communication. WS-Security operates at the message level, so security is enforced end-to-end regardless of the underlying transport protocol.

Concept tested: WS-Security SOAP message integrity and confidentiality

Source: https://www.oasis-open.org/standards/#wssv1.1

Topics

#WS-Security#SOAP#web services#message integrity

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice