Service A is a Web service that accesses the Student table in a shared database in order to store XML-based student records. When invoked, the GetStudent operation of Service A uses a StudentID value to retrieve the record of a single student by executing an XPath query. An attacker sends a malicious message that manipulates the XPath query to return all the student records. Which of the following attacks was carried out?

• A. SQL injection attack
• B. None of the above
• C. XPath injection attack
• D. XML parser attack

Architects responsible for a domain service inventory are being asked to make some of their services available to service consumers from outside the organization. However, they are reluctant to do so and consult you to help define a security architecture that will keep all of the existing services within the domain service inventory hidden within a private network.
Which of the following is a valid approach for fulfilling this requirement?

• A. Apply the Brokered Authentication pattern to position an authentication broker outside the private network that has been configured to access the internal services via a firewall.
  The authentication broker becomes the sole contact point for external service consumers.
• B. Apply the Trusted Subsystem pattern in order to position a service outside the private network that authenticates each incoming request and then uses its own set of credentials to get access to internal services. This service becomes the sole contact point for external service consumers.
• C. Apply the Service Perimeter Guard pattern in order to position a perimeter service outside the private network that has been configured to access the internal services via a firewall. The perimeter service becomes the sole contact point for external service consumers.
• D. None of the above.

The Exception Shielding pattern can be applied together with the Trusted Subsystem pattern.

• A. True
• B. False

A malicious passive intermediary intercepts messages sent between two services. Which of the following is the primary security concern raised by this situation?

• A. The integrity of the message can be affected.
• B. The availability of the message can be affected.
• C. The reliability of the message can be affected.
• D. The confidentiality of the message can be affected.

Architects have applied the Service Perimeter Guard pattern to a service inventory by adding a perimeter service inside the firewall that receives all incoming request messages and then routes them to the appropriate services. The firewall has been configured to allow any service consumers to send messages to the perimeter service. You are told that this security architecture is flawed. Which of the following statements describes a valid approach for improving the security architecture?

• A. The Trusted Subsystem pattern needs to be applied to the perimeter service so that it can authenticate all incoming requests before forwarding them to services within the service inventory.
• B. The described security architecture is not flawed because the Service Perimeter Guard pattern was applied correctly.
• C. The perimeter service needs to be outside the firewall and the firewall needs to be configured so that only the perimeter service has access to the services within the service inventory.
• D. None of the above.