Question 1

Security policies that extend the technical service contract must be standardized within a given service inventory. This statement is in accordance with which service-orientation principle?

AService Abstraction

BService Reusability

CService Composability

DNone of the above

Answer : D

Question 2

A service that was previously using a shared identity store is now given its own dedicated identity store instead. What are the likely impacts (positive or negative) that will result from this change?

AThe service's autonomy is increased.

BThe operational responsibility is increased due to the need to keep the dedicated identity store in synch with a parent identity store.

CThe potential to apply the Service Abstraction principle is increased.

DThe service will no longer be dependent on a certificate authority.

Answer : A, B

Question 3

Responses issued by Certificate Revocation Lists (CRLs) and Online Certificate Status Protocol (OCSP) services need to be ___________ and ___________ so that it can be determined whether these responses were sent by a trusted certificate authority or a malicious program pretending to be a certificate authority.

Aencrypted, verified

Bsigned, verified

Cencrypted, decrypted

Dsigned, decrypted

Answer : B

Question 4

Which of the following are valid reasons for a certificate to be revoked:

AThe certificate was fraudulently obtained

BThe public key has been compromised

CThe private key has been compromised

DThe subject is no longer permitted to use the certificate

Answer : A, C, D

Question 5

Security specialists at an organization require that messages exchanged between two services are kept private. There is an added requirement to check if the messages were tampered with. The application of which of the following patterns fulfills these requirements?

AData Confidentiality

BData Origin Authentication

CDirect Authentication

DBrokered Authentication