C_CPI Integration Suite Development Practice Question
An integration developer is configuring a SOAP receiver adapter in SAP Cloud Integration to call an external web service that requires WS-Security with a username token. The developer needs to ensure the credentials are not stored in plain text in the integration flow and can be changed without redeploying. What is the appropriate configuration?
⚠ Common exam trap
The trap here is believing that the Secure Store or Partner Directory is the correct place for WS-Security credentials, when the SOAP adapter expects a User Credentials artifact.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a User Credentials artifact in the Security Material monitor, reference it from the SOAP adapter's WS-Security configuration, and update the artifact when credentials change.
The SOAP receiver adapter supports WS-Security username tokens backed by a User Credentials artifact stored in the tenant's Security Material. Referencing that artifact keeps the password out of the integration flow and allows credential rotation by updating the artifact, with no redeployment required. This satisfies both the security and operational requirements for calling the external service.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a User Credentials artifact in the Security Material monitor, reference it from the SOAP adapter's WS-Security configuration, and update the artifact when credentials change.
Why this is correct
User Credentials artifacts are stored securely in the tenant's security material and referenced by name from adapters. The SOAP adapter's WS-Security settings can use this artifact for the username token, so credentials are never exposed in the flow and can be rotated by updating the artifact without redeploying the integration flow.
- ✗
Enter the username and password directly in the SOAP adapter's WS-Security configuration fields and redeploy the flow whenever credentials change.
Why it's wrong here
Hardcoding credentials in the adapter configuration stores them as part of the integration flow artifact, which violates the requirement to avoid plain-text storage and forces a redeployment for every credential change. It also exposes sensitive values to anyone who can view the flow configuration, so it does not meet the security or operational requirements.
- ✗
Use a Secure Store artifact to hold the password only, and hardcode the username in the adapter because usernames are not sensitive.
Why it's wrong here
Even if the password is protected in a Secure Store, the Secure Store is intended for key-value pairs accessed at runtime, not for direct adapter WS-Security configuration. Hardcoding the username still leaves part of the credential in the flow and requires redeployment to change it. The requirement is to avoid plain-text credentials and support changes without redeployment, which this approach only partially satisfies.
- ✗
Store the credentials in a Partner Directory parameter and reference the parameter using a dynamic expression in the SOAP adapter.
Why it's wrong here
Partner Directory parameters are designed for partner-specific configuration values and are not encrypted as security material by default. Using them for WS-Security credentials would expose the password and does not provide the secure storage or rotation behavior required. The SOAP adapter also does not natively resolve Partner Directory parameters for WS-Security username tokens.
About these practice questions
This C_CPI question is part of Courseiva's 218-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official SAP exam blueprint
This C_CPI practice question is part of Courseiva's free SAP certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the C_CPI exam.