000-609 Latest Exam Braindumps
Question 19: The SAML Holder of Key (HOK) method uses PKI to establish trust between a consumer and providerin different trust domains. An Attesting Entity that is trusted by both the consumer and the provider is used.
Here is an example of an HOK scenario:
1. A SOAP message is sent by a client to an Attesting Entity over SSL.
2) The Attesting Entity obtains the public key of the client and places it in the SAML token it is creating in
response to the client request, and digitally signs the token.
3) The client adds that SAML token to the SOAP header and constructs the SOAP body, signs it with its
own key, and calls the web service provider over SSL.
4) The web service provider verifies the SAML token was signed by the trusted Attesting Entity and
processes the message.
Given this scenario, which of the following elements of PKI are used to establish trust between the
consumer and provider?
A. The Attesting Entity, provider and consumer use a shared private key to establish trust between them.
B. The Attesting Entity sends its public key to the provider which the provider compares to the trusted
public key in its key store to establish trust.
C. The Attesting Entity digitally signs the consumer message with its private key which the provider
verifies using the trusted public key of the Attesting Entity.
D. The Attesting Entity vouches for the consumer since it authenticated the consumer first and asserts
that by sending a SAML token to the provider over a secure channel.
Correct Answer: C
