Which of the following is a security feature provided by the WS-Security extension in the Simple Object Access Protocol (SOAP)?

The WS-Security extension in Simple Object Access Protocol (SOAP) provides security features at the

message level rather than the transport level. One of its primary features is message confidentiality.

Message Confidentiality: Achieved by encrypting SOAP messages using XML Encryption. This ensures

that even if a message is intercepted, its content remains unreadable.

Additional Features: Also provides message integrity (using digital signatures) and authentication.

Use Case: Suitable for scenarios where messages pass through multiple intermediaries, as security is

preserved across hops.

Incorrect Options:

A . Transport Layer Security (TLS): Secures the transport layer, not the SOAP message itself.

C . Malware protection: Not related to WS-Security.

D . Session management: SOAP itself is stateless and does not handle session management.

Exact Extract from CCOA Official Review Manual, 1st Edition:

Refer to Chapter 7, Section "Web Services Security," Subsection "WS-Security in SOAP" - WS-Security

provides message-level security, including confidentiality and integrity.