What must SOAP rely on for security?

The correct answer is A. Encryption. SOAP (Simple Object Access Protocol) implements security at the message level through the WS-Security specification, which uses XML encryption and XML digital signatures to protect the message payload itself. Unlike REST APIs that depend on transport-layer security (TLS/SSL)…

Submitted by yuki_2020· Apr 18, 2026Cloud Application Security

Question

Options

AEncryption
BTokenization
CTLS
DSSL

How the community answered

(24 responses)

A
88% (21)
B
4% (1)
C
8% (2)

Explanation

SOAP (Simple Object Access Protocol) implements security at the message level through the WS-Security specification, which uses XML encryption and XML digital signatures to protect the message payload itself. Unlike REST APIs that depend on transport-layer security (TLS/SSL) for protection, SOAP's built-in security model is based on encrypting the message content directly. This means SOAP messages can be secured end-to-end regardless of the transport channel used, making encryption the foundational security mechanism SOAP relies upon. TLS and SSL operate at the transport layer and are not SOAP-specific security mechanisms.

Topics

#SOAP Security#Web Services Security#Encryption#Cloud Application Security

Community Discussion

No community discussion yet for this question.

Full CCSP Practice