nerdexam
SOA

S90-09A · Question #26

It has been confirmed that Policy A and Policy B are, in fact, the same policy and that the security credential check performed by Service Agent B also needs to be carried out on messages sent to…

The correct answer is A. The Policy Centralization pattern can be applied so that Policy A and Policy B are combined into. Applying the Policy Centralization pattern addresses both problems simultaneously: it merges the duplicate Policy A and Policy B into a single authoritative policy, eliminating redundant content, while also repositioning or reconfiguring Service Agent B so it intercepts and…

Advanced Service Design and Patterns

Question

It has been confirmed that Policy A and Policy B are, in fact, the same policy and that the security credential check performed by Service Agent B also needs to be carried out on messages sent to Service B . How can this service composition architecture be changed to reduce the redundancy of policy content and fulfill the new security requirement?

Exhibit

S90-09A question #26 exhibit

Options

  • AThe Policy Centralization pattern can be applied so that Policy A and Policy B are combined into
  • BThe Policy Centralization pattern can be applied so that Policy A and Policy B are combined into
  • CService Agent B can be moved so that it performs the security credential check for Service B, but
  • DThe Policy Centralization pattern can be applied so that Service Agent A is changed to enforce the
  • ENone of the above.

How the community answered

(48 responses)
  • A
    67% (32)
  • B
    2% (1)
  • C
    17% (8)
  • D
    4% (2)
  • E
    10% (5)

Explanation

Applying the Policy Centralization pattern addresses both problems simultaneously: it merges the duplicate Policy A and Policy B into a single authoritative policy, eliminating redundant content, while also repositioning or reconfiguring Service Agent B so it intercepts and enforces the security credential check on all messages destined for Service B - fulfilling the new security requirement in the same architectural change.

Why the distractors fail:

  • B appears identical in prefix to A but likely introduces a subtle deviation - perhaps centralizing the policy without correctly wiring Service Agent B to cover Service B, meaning the security gap remains.
  • C moves Service Agent B to cover Service B's security check but does not apply Policy Centralization, so the duplicate policy content persists.
  • D applies Policy Centralization but targets Service Agent A rather than correctly addressing Service Agent B's expanded scope, leaving Service B unprotected or the architecture logically misaligned.
  • E is eliminated because a valid, complete solution exists.

Memory tip: Think of Policy Centralization as a "one policy, many enforcers" pattern - when two services share an identical policy, merge them into one and let agents reference it. If the question mentions both redundancy and a missing enforcement point, the correct answer will fix both in one move. Any option that only fixes one of the two problems is a distractor.

Topics

#Policy Centralization#service agents#security credentials#policy consolidation

Community Discussion

No community discussion yet for this question.

Full S90-09A Practice