WS-Security role.

WS-Security role.

• A. SOAP
• B. WS-Security
• C. WSDL
• D. RESTful

Answer: (B)

WS-Security provides message-level security for SOAP web services by inserting a Security header into the SOAP envelope and carrying tokens, digital signatures, and encryption. This lets you authenticate the sender, ensure the message hasn’t been tampered with, and protect sensitive parts of the message even as it traverses multiple intermediaries. The security travels with the message itself, not just the communication channel, which is why it’s different from transport-layer protections like TLS that protect the path between client and server. SOAP is the protocol being secured, but WS-Security is the mechanism that defines how to attach security information to the SOAP message. WSDL describes the service interface, not security mechanisms, and RESTful refers to a different architectural style for web services. So WS-Security is the role in question.

WS-Security provides message-level security for SOAP web services by inserting a Security header into the SOAP envelope and carrying tokens, digital signatures, and encryption. This lets you authenticate the sender, ensure the message hasn’t been tampered with, and protect sensitive parts of the message even as it traverses multiple intermediaries. The security travels with the message itself, not just the communication channel, which is why it’s different from transport-layer protections like TLS that protect the path between client and server. SOAP is the protocol being secured, but WS-Security is the mechanism that defines how to attach security information to the SOAP message. WSDL describes the service interface, not security mechanisms, and RESTful refers to a different architectural style for web services. So WS-Security is the role in question.