Multiple choice technology security

SOAP is a

  1. Depends on how it is used

  2. Stateful protocol

  3. Transport Layer protocol

  4. Stateless protocol

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

SOAP is fundamentally stateless - each SOAP message contains all necessary information and doesn't rely on previous messages in the conversation. The protocol itself doesn't maintain session state between requests. Any stateful behavior must be implemented at the application layer using mechanisms like session IDs or tokens, not built into SOAP.

AI explanation

SOAP does not maintain any built-in notion of state between messages — each SOAP call is self-contained and independent, with no server-side memory of prior calls required by the protocol itself. Any statefulness in a SOAP-based system has to be built on top (e.g., via session tokens or WS-* extensions), which is why SOAP itself is classified as a stateless protocol, and it's an application/messaging protocol rather than a transport-layer one.