Exam MCIA-Level-1 Topic 1 Question 84 Discussion

Actual exam question for MuleSoft's MCIA-Level-1 exam
Question #: 84
Topic #: 1

An organization is creating a set of new services that are critical for their business. The project team prefers using REST for all services but is willing to use SOAP with common WS-" standards if a particular service requires it.
What requirement would drive the team to use SOAP/WS-* for a particular service?

A. Must use XML payloads for the service and ensure that it adheres to a specific schema B. Must publish and share the service specification (including data formats) with the consumers of the service C. Must support message acknowledgement and retry as part of the protocol D. Must secure the service, requiring all consumers to submit a valid SAML token

Suggested Answer: D Vote an answer

Security Assertion Markup Language (SAML) is an open standard that allows identity providers (IdP) to pass authorization credentials to service providers (SP).
SAML transactions use Extensible Markup Language (XML) for standardized communications between the identity provider and service providers.
SAML is the link between the authentication of a user's identity and the authorization to use a service.
WS-Security is the key extension that supports many authentication models including: basic username/password credentials, SAML, OAuth and more.
A common way that SOAP API's are authenticated is via SAML Single Sign On (SSO). SAML works by facilitating the exchange of authentication and authorization credentials across applications. However, there is no specification that describes how to add SAML to REST web services.
Reference:
https://www.oasis-open.org/committees/download.php/16768/wss-v1.1-spec-os-SAMLTokenProfile.pdf

by saakshitekade at Oct 14, 2024, 10:22 AM

Limited Time Offer

15%

Off

Get Premium MCIA-Level-1 Questions as Interactive Self Test Engine or PDF

Comments

saakshitekade

2024-10-14 10:22:10

Selected Answer: D

SOAP with WS- standards* (like WS-ReliableMessaging) is typically chosen when you need features such as message reliability, acknowledgment, retries, and transaction support. These are common features supported natively in the SOAP protocol.
• Option D (requiring a valid SAML token) is not strictly a reason to switch to SOAP, as REST APIs can also support security features such as SAML tokens or OAuth, meaning it’s not a decisive factor for switching to SOAP.
• Option C (message acknowledgment and retry) is more tightly bound to SOAP’s WS-* specifications. REST does not provide native support for reliability or message delivery acknowledgment, making SOAP a better fit for this requirement.

upvoted 1 times

...

Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

RECENT DISCUSSIONS

Useful Links

Contact Us

Our Working Time: ( GMT 0:00-15:00 )
From Monday to Saturday

Support: Contact now

If you have any question please leave me your email address, we will reply and send email to you in 12 hours.

Disclaimer:
Actual4test doesn't offer Real SANS and GIAC Exam Questions.
Oracle and Java are registered trademarks of Oracle and/or its affiliates
Actual4test material do not contain actual actual Oracle Exam Questions or material.
Actual4test doesn't offer Real Microsoft Exam Questions.
Microsoft®, Azure®, Windows®, Windows Vista®, and the Windows logo are registered trademarks of Microsoft Corporation
Actual4test Materials do not contain actual questions and answers from Cisco's Certification Exams. The brand Cisco is a registered trademark of CISCO, Inc
CFA Institute does not endorse, promote or warrant the accuracy or quality of these questions. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Actual4test does not offer exam dumps or questions from actual exams. We offer learning material and practice tests created by subject matter experts to assist and help learners prepare for those exams. All certification brands used on the website are owned by the respective brand owners. Actual4test does not own or claim any ownership on any of the brands.