312-50V13 · Question #443
Rebecca, a security professional, wants to authenticate employees who use web services for safe and secure communication. In this process, she employs a component of the Web Service Architecture…
The correct answer is D. WS-Security. Rebecca uses a SOAP extension for web service communication that ensures the integrity and confidentiality of messages for employee authentication.
Question
Options
- AWSDL
- BWS Work Processes
- CWS-Policy
- DWS-Security
How the community answered
(55 responses)- A2% (1)
- B2% (1)
- C5% (3)
- D91% (50)
Why each option
Rebecca uses a SOAP extension for web service communication that ensures the integrity and confidentiality of messages for employee authentication.
WSDL (Web Services Description Language) is an XML-based language used to describe the functionality of a web service, not to secure its messages.
WS Work Processes is not a standard component of the Web Service Architecture specifically designed for securing communication.
WS-Policy is used to attach security policies to web services, defining 'what' security requirements exist, but WS-Security is the actual implementation mechanism that provides 'how' those requirements are met.
WS-Security (Web Services Security) is an extension to SOAP that defines how to apply security to web services, enabling message integrity, confidentiality, and authentication. It achieves this by providing mechanisms for message signing, encryption, and the use of security tokens within SOAP messages, thereby securing communication and authenticating employees.
Concept tested: Web services security standards (WS-Security)
Source: https://www.w3.org/TR/ws-security/
Topics
Community Discussion
No community discussion yet for this question.