What must SOAP rely on for security since it does not provide security as a built-in capability?

The correct answer is A. Encryption. Simple Object Access Protocol (SOAP) uses Extensible Markup Language (XML) for data passing, and it must rely on the encryption of those data packages for security. TLS and SSL (before it was deprecated) represent two commons approaches to using encryption for protection of data

Submitted by ahmad_uae· Apr 18, 2026Cloud Application Security

Question

Options

AEncryption
BTokenization
CTLS
DSSL

How the community answered

(37 responses)

A
92% (34)
B
3% (1)
C
5% (2)

Explanation

Simple Object Access Protocol (SOAP) uses Extensible Markup Language (XML) for data passing, and it must rely on the encryption of those data packages for security. TLS and SSL (before it was deprecated) represent two commons approaches to using encryption for protection of data transmissions. However, they are only two possible options and do not encapsulate the overall concept the question is looking for. Tokenization, which involves the replacement of sensitive data with opaque values, would not be appropriate for use with SOAP because the actual data is needed by the services.

Topics

#SOAP security#Web services security#Encryption#Message-level security

Community Discussion

No community discussion yet for this question.

Full CCSP Practice