XML Signature and XML Encryption provide the foundation for message level security in Web services. Which statement about XML signature is NOT true?
A.
use detached signatures, where the digital signature covers sibling elements or external data
B.
use enveloping signatures, where the digital signature element encloses the data to be signed
C.
use enveloping signatures, where the digital signature is a child element of the data to be signed
D.
use enveloped signatures, where the digital signature is a child element of the data to be signed
enveloping signature is one element of the data to be signed(to be verified by the party holding the public key). The party holding the private key encrypt the digest of the message(sign), and attach the signature as one element of the message, send it to the party holding the private key, the receiver decrypt the signature with the public key and recalculate the digest to compare to the decrypted digest.
Answer is C
Basically there are three types of XML signatures.
Enveloped Signature
Enveloping Signature
Detached Signatures
https://www.javacodegeeks.com/2013/10/xml-security-with-digital-signature-in-java.html
First of all we have to understand the concept of digital signature. Digital signature is an electronic signature that is used to validate the authenticity of the document sent by a trusted person. It also provides assurance that the original content of the document has not been modified during transmission. A digital signature can be used with any message, whether it is encrypted or not, so that the receiver can be sure of the identity of the sender and that the message has not been altered by an unknown person