SYO 701 CLOUD SECURITY / IAM Module FC

Front

1. 1. A company's legal department drafted sensitive documents in a SaaS application and wants to ensure the documents cannot be accessed by individuals in high-risk countries. Which of the following is the most effective way to limit this access?

Back

C. Geolocation policy

Front

5. 5. During the onboarding process, an employee needs to create a password for an intranet account. The password must include ten characters, numbers, and letters, and two special characters. Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet profile. Which of the following access management concepts is the company most likely using to safeguard intranet accounts and grant access to multiple sites based on a user's intranet account?

Back

C. Password complexity
F. Open authentication

Front

10. 10. An internet company has created a new collaboration application. To expand the user base, the company wants to implement an option that allows users to log in to the application with the credentials of other popular websites. Which of the following should the company implement?

Back

D. OpenID

Front

13. 13. A network manager wants to protect the company's VPN by implementing multifactor authentication that uses:

- Something you know

- Something you have

- Something you are

Which of the following would accomplish the manager's goal?

Back

C. Password, authentication token, thumbprint

Front

22. Which of the following is a common source of unintentional corporate credential leakage in cloud environments?

Back

A. Code repositories

Front

24. Which of the following automation use cases would best enhance the security posture of an organization by rapidly updating permissions when employees leave a company?

Back

B. Disabling access

Front

36. 36. A business received a small grant to migrate its infrastructure to an off-premises solution. Which of the following should be considered first?

Back

D. Security of architecture

Front

37. A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?

Back

A. A thorough analysis of the supply chain

Front

38. A company needs to provide administrative access to internal resources while minimizing the traffic allowed through the security boundary. Which of the following methods is most secure?

Back

A. Implementing a bastion host

Front

40. A company has decided to move its operations to the cloud. It wants to utilize technology that will prevent users from downloading company applications for personal use, restrict data that is uploaded, and have visibility into which applications are being used across the company. Which of the following solutions will best meet these requirements?

Back

B. A CASB