C_CPI Integration Suite Development Practice Question
An integration developer is building an integration flow in SAP Cloud Integration that must send a message to a receiver system using the SOAP 1.x adapter with WS-Security UsernameToken authentication. The security team requires that the password not be transmitted in plain text, and that the nonce and timestamp be included in the SOAP header. Which configuration should the developer apply on the SOAP receiver channel?
⚠ Common exam trap
The trap here is assuming that enabling HTTPS on the SOAP channel automatically secures the WS-Security UsernameToken, when transport encryption and token serialization are independent concerns.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set Security Mode to Username Token and enable 'Password Digest' with nonce and timestamp.
The SOAP 1.x receiver adapter supports WS-Security UsernameToken with two password modes. Password Digest hashes the password with a nonce and timestamp, ensuring the cleartext credential never appears in the SOAP header, while also providing replay protection. Password Text would expose the credential, and transport-level or certificate-based options do not satisfy the receiver's UsernameToken expectation. Configuring Password Digest plus nonce and timestamp meets all stated requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Transport Binding with HTTPS and leave the WS-Security UsernameToken at default settings.
Why it's wrong here
HTTPS protects the message in transit but does not change how the UsernameToken is serialized. With default settings the adapter may still emit Password Text, so the password remains readable in the SOAP header after TLS termination at the receiver. The requirement explicitly targets the token content, not only the transport, so this option is insufficient.
- ✗
Configure the SOAP adapter to use X.509 Token and sign the message body with the tenant's keystore entry.
Why it's wrong here
X.509 Token and message signing provide integrity and authentication via certificates, but they do not implement the WS-Security UsernameToken profile the receiver expects. The receiver is configured for UsernameToken, so sending a certificate-based token would be rejected. This changes the authentication mechanism entirely rather than securing the required username/password credential.
- ✗
Set Security Mode to Username Token and select 'Password Text' while adding a WS-Policy assertion for nonce.
Why it's wrong here
Password Text transmits the credential in cleartext inside the SOAP header, which directly violates the stated requirement that the password must not travel in plain text. Adding a nonce does not mask the password; it only helps prevent replay. WS-Policy alone cannot convert a cleartext token into a digest token, so this configuration fails the security constraint.
- ✓
Set Security Mode to Username Token and enable 'Password Digest' with nonce and timestamp.
Why this is correct
The SOAP 1.x adapter's WS-Security UsernameToken with Password Digest hashes the password together with a generated nonce and a creation timestamp, so the cleartext secret never crosses the wire. Enabling nonce and timestamp also satisfies the replay-protection requirement the security team stated. This is the standard out-of-the-box configuration for this scenario and requires no custom scripting.
About these practice questions
Courseiva writes every C_CPI question from scratch — 218 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official SAP exam blueprint
This C_CPI practice question is part of Courseiva's free SAP certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the C_CPI exam.