Exam CCSP topic 1 question 114 discussion

SOAP (Simple Object Access Protocol) does not include built-in security features, so it typically relies on transport-layer protection—most commonly TLS (Transport Layer Security)—to safeguard data in transit. While SSL was used in older implementations, it’s largely deprecated, and TLS is the modern standard for securing SOAP communications.

A. SOAP uses SSL/TLS protocols to secure communication channels between clients and servers.

SSL (Secure Sockets Layer). SOAP (Simple Object Access Protocol) relies on SSL for ensuring secure communication and data transfer.

SOAP itself does not inherently rely solely on encryption; it can work over both encrypted and unencrypted channels.

C. TLS (Transport Layer Security) for security. TLS is a protocol that provides encryption and secure communication over a network. While SOAP can use other security measures like encryption and tokenization, it typically relies on TLS (or its predecessor, SSL) to ensure secure communication between client and server.

encryption is right. SOAP does not provide encryption, so it needs the extra security