Configure Security Controls ACP-520 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A startup uses Atlassian Cloud with a small team. They want to ensure that only users with a company email address (@startup.com) can sign up for the site. They also want to prevent users from other organizations from being added as guests. What should the admin configure?

   • ASet the allowed email domains to '@startup.com' in the product access settings and disable guest access.
   • BCreate a user group with only @startup.com users and set it as the default group for new users.
   • CEnable mandatory 2FA and require users to verify their email address.
   • DEnable SAML SSO with a corporate IdP and enforce SSO.
   Reveal Solution Discussion Select an answer first
2. 2expert · medium

   A company has an Atlassian Cloud organization with Jira and Confluence. The security team wants to enforce mandatory 2FA for all users. However, the company has a group of external contractors who are added as guests and use their own Atlassian accounts (not corporate SSO). The contractors cannot use the corporate IdP. What is the best way to enforce 2FA for these guest users?

   • AEnable mandatory 2FA at the organization level; guest users will be prompted to set up 2FA on their own Atlassian accounts.
   • BEnable mandatory 2FA only for users in the 'Employees' group.
   • CCreate a separate organization for the contractors and enable mandatory 2FA there.
   • DDisable guest access and require contractors to use corporate SSO.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Your organization wants to restrict access to Atlassian Cloud products so that users can only sign in from the corporate office network. Which security control should an organization admin configure in Atlassian Cloud to enforce this restriction?

   • AIP allowlisting
   • BSAML single sign-on
   • CSCIM provisioning
   • DTwo-step verification
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   As an organization admin, you need to enforce a policy that requires users to authenticate using a second factor beyond their password. Which security control in Atlassian Cloud should you configure to meet this requirement?

   • ASAML single sign-on
   • BSCIM provisioning
   • CTwo-step verification
   • DIP allowlisting
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   A global company has Atlassian Cloud sites in multiple regions. The security team wants to enforce a strict password policy for all users, but they also want to allow users to authenticate via their corporate SSO. The company's compliance team requires that passwords are rotated every 90 days. What is the best way to achieve this?

   • AEnable mandatory 2FA in Atlassian Cloud and set the password expiration to 90 days in the Atlassian security settings.
   • BUse SCIM to synchronize passwords from the IdP to Atlassian Cloud and set expiration in Atlassian.
   • CDisable SSO and require users to use Atlassian passwords with a 90-day expiration policy.
   • DEnforce SSO and configure the password policy in the corporate identity provider (IdP) to require rotation every 90 days.
   Reveal Solution Discussion Select an answer first