Valid B2C-Commerce-Architect Dumps shared by ExamDiscuss.com for Helping Passing B2C-Commerce-Architect Exam! ExamDiscuss.com now offer the newest B2C-Commerce-Architect exam dumps, the ExamDiscuss.com B2C-Commerce-Architect exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com B2C-Commerce-Architect dumps with Test Engine here:
During implementation, the team found that there is a notification controller exposed for an external service that marks the order as paid when notification is received. The notification URL is sent to the service together with the payment request and contains only the URL with orderlD as the parameter. What should the Architect recommend to the team in order to prevent the unauthorized usage of the controller to mark the orders as paid?
Correct Answer: C
To enhance the security of the notification controller exposed for marking orders as paid, the recommended approach is to add an order-specific token to the callback URL (Answer C). This token should be verified against a stored value on the order to ensure the authenticity and integrity of the payment notification. This method prevents unauthorized use of the controller, as only callbacks containing the correct, order-specific token would be allowed to mark orders as paid. This strategy is essential in maintaining secure and reliable transaction processes within Salesforce B2C Commerce.
