Java EE 7 Application Developer — Question 45

Which statement is true about the WS-Security standard?

Answer options

• A. It is a Java EE standard for protecting SOAP services.
• B. It relies on HTTP security mechanism to protect SOAP messages in transmit.
• C. It provides message-level security.
• D. It defines protocol-specific ways of protecting SOAP messages.

Correct answer: C

Explanation

The correct answer is C, as WS-Security focuses on providing message-level security for SOAP messages. Option A is incorrect because WS-Security is not limited to Java EE. Option B is wrong since it does not solely rely on HTTP security mechanisms. Option D is misleading; while it does address specific protocols, the primary focus is on message-level security.