C_CPI Integration Suite Development Practice Question
An integration developer is building an integration flow in SAP Cloud Integration that sends messages to an external partner's SOAP 1.1 endpoint. The partner requires WS-Security UsernameToken authentication with a password digest. The developer adds a Security Material of type 'User Credentials' and now needs to attach it to the outbound message. Which step should the developer use in the integration flow to enforce the WS-Security UsernameToken policy on the SOAP request?
⚠ Common exam trap
The trap here is assuming that setting a SOAPAction header or mapping credentials into the body provides WS-Security authentication, when only the WS-Security Outbound step generates a valid UsernameToken with digest.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add a WS-Security Outbound step referencing the deployed User Credentials artifact.
WS-Security UsernameToken authentication for outbound SOAP calls in Cloud Integration is implemented through the WS-Security Outbound step, which references a deployed User Credentials artifact and injects the wsse:Security header with nonce and password digest. Neither header manipulation, message mapping, nor OAuth-based adapter authentication can produce a compliant UsernameToken, so only the dedicated WS-Security step satisfies the partner's policy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Add a WS-Security Outbound step referencing the deployed User Credentials artifact.
Why this is correct
The WS-Security Outbound step is the Integration Suite feature that applies WS-Security policies to outbound SOAP messages. By selecting UsernameToken as the security type and referencing the deployed User Credentials artifact, the step generates the wsse:Security header with nonce and password digest. This satisfies the partner's WS-Security policy without exposing the password in the payload or mapping logic.
- ✗
Add a Content Modifier step and set the SOAPAction header to the partner's operation name.
Why it's wrong here
A Content Modifier manipulates headers, properties, or the body, but it cannot produce the WS-Security SOAP header with a UsernameToken, nonce, and digest. Setting SOAPAction affects SOAP 1.1 routing to the operation, not security. The partner would reject the request because no UsernameToken element is present in the SOAP envelope's security header.
- ✗
Configure the SOAP receiver adapter's authentication to 'OAuth 2.0 Client Credentials'.
Why it's wrong here
OAuth 2.0 Client Credentials is a token-based authorization flow for REST APIs, not a WS-Security UsernameToken mechanism for SOAP. Selecting it on the SOAP receiver adapter would not generate a wsse:Security header with a digest, and the partner specifically requires UsernameToken. The request would be rejected as unauthenticated against the partner's WS-Policy.
- ✗
Add a Message Mapping step that maps credentials into the SOAP header.
Why it's wrong here
Message Mapping transforms payload structures between source and target schemas. It cannot compute the SHA-1 password digest, generate a nonce, or insert the wsse:Security header that WS-Security UsernameToken requires. Manually mapping credentials would also expose the password in the mapping and would not produce a standards-compliant token, so the partner's policy would fail validation.
About these practice questions
This C_CPI question is part of Courseiva's 218-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official SAP exam blueprint
This C_CPI practice question is part of Courseiva's free SAP certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the C_CPI exam.