S90.18 Exam Questions Tutorials

When required, generic security logic can be embedded within a service. The close proximity to the service logic maximizes the chances that the security logic will be consistently executed without interference from attackers.

When required, generic security logic can be abstracted into a separate utility service. This allows for reuse.

When required, generic security logic can be abstracted into a service agent. This allows for reuse and the security logic can be executed in response to runtime events.

All of the above.

A shared key is used by both the services for message encryption and decryption

The XML-Signature standard is applied

The Data Origin Authentication pattern is applied

None of the above