Edge Identity and Authentication GCSA Practice Questions (Page 10)

Questions 46–48

1. 46application · medium

   A company is deploying edge devices that need to authenticate to a cloud backend. The devices are in remote locations with limited bandwidth. The security team wants to minimize the amount of data sent during authentication while maintaining strong security. Which approach is most suitable?

   • AUse a VPN tunnel that authenticates once and then allows all traffic.
   • BUse a long shared secret that is sent with every request.
   • CUse OAuth 2.0 with a remote token endpoint for every request.
   • DUse certificate-based authentication with short-lived certificates and local validation.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which authentication mechanism at the edge uses a pair of cryptographic keys to verify the identity of a device or service?

   • AUsername and password
   • BCertificate-based authentication
   • COAuth 2.0 authorization code flow
   • DBiometric authentication
   Reveal Solution Discussion Select an answer first
3. 48application · medium

   A financial services company uses edge devices that process transactions. They want to implement zero trust by continuously verifying the device's security posture. Which mechanism is most aligned with this goal?

   • AUse a strong password for the device and change it every 90 days.
   • BUse a device health attestation service that checks for updated software, enabled encryption, and absence of jailbreaks before granting access.
   • CRely on the network firewall to block malicious traffic from the device.
   • DAuthenticate the device once at enrollment and then trust it for the lifetime of the device.
   Reveal Solution Discussion Select an answer first