Edge Identity and Authentication GCSA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A university has multiple campuses, each with its own identity management system. Students and faculty move between campuses and need to access edge services (printers, lab machines) without re-authenticating. The IT team wants to implement federated identity to enable SSO. Which component is required?

   • AA trust relationship between the identity providers of each campus.
   • BA single Active Directory domain for all campuses.
   • CA VPN that connects all campus networks.
   • DA shared database of all user passwords across campuses.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has edge devices that need to retrieve secrets from a central secrets manager. The devices are in untrusted locations. Which approach best protects the secrets?

   • AUse a shared token for all devices to simplify access to the secrets manager.
   • BUse mutual TLS between the device and the secrets manager, and grant each device a scoped token that can only access its own secrets.
   • CStore the secrets in a file on the device and encrypt the file with a password.
   • DUse a long-lived API key stored in the device's configuration file.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A global company has edge services in multiple cloud regions and on-premises data centers. Employees need to access these services using their existing corporate credentials. The company wants to implement single sign-on (SSO) across all edge services. Which approach is most effective?

   • ADeploy a VPN that gives employees access to the internal network and rely on network trust.
   • BCreate separate user accounts in each region and synchronize passwords using a directory sync tool.
   • CUse a single shared API key for all employees to access all edge services.
   • DUse an identity provider that supports federation protocols (SAML/OIDC) and integrate all edge services as relying parties.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which protocol is commonly used to implement identity federation for cross-domain authentication?

   • ASAML 2.0
   • BDNS
   • CDHCP
   • DLDAP
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has edge devices that need to access secrets from a secrets manager. The devices are in a remote location with intermittent connectivity. They want to ensure that the devices can still function during network outages. Which approach is most appropriate?

   • AUse a long-lived secret that is embedded in the device firmware.
   • BCache secrets locally on the device with a short TTL and use a hardware security module to protect them at rest.
   • CStore secrets in plaintext on the device to ensure availability.
   • DRequire the device to contact the secrets manager for every secret access.
   Reveal Solution Discussion Select an answer first