SOA S90.19 Value Pack (Frequently Bought Together)

When applying the Exception Shielding pattern, which of the following are valid options for implementing exception shielding logic?

• A. within a utility service
• B. as part of the core service logic
• C. All of the above.
• D. within a service agent

The service contract for Service A uses an XML schema that does not specify the maximum length for the CustomerAddress XML element. A service consumer sends a message that contains a very long string of characters inside the CustomerAddress XML element. This can be an indication of what types of attacks?

• A. Buffer overrun attack
• B. XML parser attack
• C. XPath injection attack
• D. Insufficient authorization attack

A service receives a message containing an XML document that expands to a very large size as it is processed by the parser. As a result, the service becomes unavailable to service consumers. The service was subjected to which type of attack?

• A. XML parser attack
• B. Exception generation attack
• C. None of the above.
• D. XPath injection attack

Service A contains reporting logic that collects statistical data from different sources in order to produce a report document. One of the sources is a Web service that exists outside of the organizational boundary. Some of Service A's service consumers are encountering slow response times and periods of unavailability when invoking Service A.
While investigating the cause, it has been discovered that some of the messages received from the external Web service contain excessive data and links to files (that are not XML schemas or policies). What can be done to address this issue?

• A. correlate request and response messages across different services
• B. define cardinality in message schemas
• C. avoid downloading XML schemas at runtime
• D. use precompiled XPath expressions

The Exception Shielding pattern can be applied together with the Trusted Subsystem pattern.

• A. False
• B. True