nerdexam
EC-Council

312-50V12 · Question #287

Rebecca, a security professional, wants to authenticate employees who use web services for safe and secure communication. In this process, she employs a component of the Web Service Architecture, whic

The correct answer is B. WS-Security. Rebecca needs a Web Service Architecture component that extends SOAP to ensure integrity and confidentiality for web service communication, and WS-Security fulfills this requirement.

Submitted by wei.xz· Mar 4, 2026Web Application Hacking

Question

Rebecca, a security professional, wants to authenticate employees who use web services for safe and secure communication. In this process, she employs a component of the Web Service Architecture, which is an extension of SOAP, and it can maintain the integrity and confidentiality of SOAP messages. Which of the following components of the Web Service Architecture is used by Rebecca for securing the communication?

Options

  • AWS-Work Processes
  • BWS-Security
  • CWS-Policy
  • DWSDL

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    85% (17)
  • C
    10% (2)

Why each option

Rebecca needs a Web Service Architecture component that extends SOAP to ensure integrity and confidentiality for web service communication, and WS-Security fulfills this requirement.

AWS-Work Processes

WS-Work Processes is not a recognized standard or component within the Web Services Architecture for securing SOAP messages; it is an invented term.

BWS-SecurityCorrect

WS-Security (Web Services Security) is an OASIS standard that defines how to attach security tokens, digital signatures, and encryption headers to SOAP messages. This enables the message integrity and confidentiality necessary for secure web service communication by protecting the message content in transit.

CWS-Policy

WS-Policy is a specification for describing the capabilities and requirements of a web service, including security policies, but it does not provide the actual mechanisms for message integrity and confidentiality.

DWSDL

WSDL (Web Services Description Language) is an XML-based language used to describe the public interface and functionality of a web service, not to provide security for its messages.

Concept tested: Web Services Security (WS-Security) functionality

Source: https://learn.microsoft.com/en-us/previous-versions/tn-archive/bb726978(v=technet.10)?redirectedfrom=MSDN

Topics

#WS-Security#SOAP security#web services authentication#XML security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V12 Practice