Configure Security Controls ACP-520 Practice Questions (Page 2)

Questions 6–7

1. 6expert · medium

   A large enterprise has an Atlassian Cloud organization with multiple products. The security team wants to enforce mandatory 2FA for all users. However, the organization has a legacy integration that uses a shared service account with a username and password to authenticate to Jira via REST API. The integration cannot be updated to use API tokens in the near term. What is the best way to enforce 2FA while keeping the legacy integration functional?

   • ADelay enabling mandatory 2FA until the legacy integration can be migrated to use API tokens.
   • BEnable mandatory 2FA and use a one-time exception for the service account via the admin API.
   • CEnable mandatory 2FA and configure an IP allowlist for the service account's IP address.
   • DEnable mandatory 2FA and create a separate organization for the service account.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A mid-sized software company uses Atlassian Cloud for Jira and Confluence. The security team requires that all users authenticate using their corporate identity provider (Okta) and that no user can log in with an Atlassian account password. The company also wants to ensure that if a user is deactivated in Okta, they lose access to Atlassian within minutes. Which configuration should the admin implement?

   • AConfigure a trust policy in Atlassian Access that requires users to authenticate with a hardware security key.
   • BSet up a user provisioning integration with Okta using SCIM and configure the organization to automatically suspend users when they are removed from Okta.
   • CEnable two-factor authentication (2FA) for all users and require them to use Okta Verify as the authenticator.
   • DEnable SAML single sign-on in the organization's security settings and set the authentication policy to 'Enforce SSO'.
   Reveal Solution Discussion Select an answer first