Arcitura Education Exam S90.18 Topic 3 Question 98 Discussion

Actual exam question for Arcitura Education's S90.18 exam

Question #: 98
Topic #: 3

A set of SAML tokens has been used as a result of the application of the Brokered Authentication pattern within a particular service inventory. Because SAML assertions normally contain a signature, the security specialist is confident that the integrity of messages will be maintained. What's wrong with this assumption?

AThe signature contained within the SAML assertion protects the integrity of the assertion, not of the message itself.

BSAML assertions also contain the name of the issuer and the validity period, which are needed in addition to the signature to ensure message integrity.

CSAML assertions cannot contain signatures.

DNothing is wrong. The security specialist's assumption is correct.

Show Suggested Answer

Suggested Answer: A

by Chantell at Sep 17, 2024, 02:07 AM

Limited Time Offer

25%

Off

Get Premium S90.18 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Corazon

8 months ago

The security specialist needs to brush up on their SAML knowledge. The signature is important, but it's not the whole story. They should also check the issuer and validity period to ensure message integrity.

upvoted 0 times

Vivan

7 months ago

The security specialist should verify the issuer and validity period in addition to the signature for message integrity.

upvoted 0 times

...

Eileen

7 months ago

B) SAML assertions also contain the name of the issuer and the validity period, which are needed in addition to the signature to ensure message integrity.

upvoted 0 times

...

Nohemi

8 months ago

A) The signature contained within the SAML assertion protects the integrity of the assertion, not of the message itself.

upvoted 0 times

...

Beckie

8 months ago

Haha, the security specialist must be new to this. SAML assertions without signatures? That's like having a birthday cake without candles!

upvoted 0 times

...

Alaine

8 months ago

I agree with Corrinne. The signature doesn't guarantee the integrity of the message, just the assertion. There could still be other parts of the message that are vulnerable.

upvoted 0 times

Ligia

7 months ago

C) SAML assertions cannot contain signatures.

upvoted 0 times

...

Tegan

7 months ago

I agree. The signature only covers the assertion, not the entire message.

upvoted 0 times

...

Sylvia

7 months ago

B) SAML assertions also contain the name of the issuer and the validity period, which are needed in addition to the signature to ensure message integrity.

upvoted 0 times

...

Tasia

8 months ago

A) The signature contained within the SAML assertion protects the integrity of the assertion, not of the message itself.

upvoted 0 times

...

Chaya

9 months ago

I'm not sure, but I think the answer might be B. The issuer and validity period are also important for ensuring message integrity.

upvoted 0 times

...

Lashaun

9 months ago

I agree with Hildred. The signature in the SAML assertion doesn't protect the message itself, so the assumption is not entirely correct.

upvoted 0 times

...

Hildred

9 months ago

I think the answer is A. The signature in the SAML assertion only protects the integrity of the assertion itself.

upvoted 0 times

...

Corrinne

9 months ago

The security specialist's assumption is incorrect. The signature in the SAML assertion only protects the integrity of the assertion itself, not the entire message.

upvoted 0 times

Alayna

8 months ago

B) SAML assertions also contain the name of the issuer and the validity period, which are needed in addition to the signature to ensure message integrity.

upvoted 0 times

...

Alayna

9 months ago

A) The signature contained within the SAML assertion protects the integrity of the assertion, not of the message itself.

upvoted 0 times

...