Edge Identity and Authentication GCSA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A healthcare organization uses edge devices that collect patient data and transmit it to a cloud backend. They want to implement zero trust principles. Which combination of controls best aligns with zero trust?

   • AAuthenticate each device with a certificate, authorize based on least privilege, and continuously verify device health before allowing data access.
   • BUse a shared secret for all devices and restrict access by IP address.
   • CAuthenticate the device once at boot and then allow all traffic from that device.
   • DUse a strong VPN tunnel from the device to the cloud and rely on the network perimeter for security.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A manufacturing company operates edge gateways in multiple plants, each in a different country. Employees use their corporate Active Directory credentials to access plant-specific dashboards. The company wants to avoid maintaining separate user accounts for each plant and wants to enforce conditional access policies based on user risk. Which solution should they implement?

   • AFederate the corporate identity provider with each plant's edge service using SAML or OIDC, and enforce conditional access policies at the identity provider.
   • BDeploy a separate identity provider in each plant and manually link accounts.
   • CCreate local user accounts on each edge gateway and synchronize passwords daily.
   • DUse a shared service account for all plant dashboards and restrict access by source IP.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has edge services that are accessed by both employees and external partners. They want to use identity federation to provide SSO for both groups, but they have different security requirements: employees must use MFA, while partners are only required to use a password. How should they configure federation?

   • AUse a single relying party trust and enforce MFA for all users.
   • BConfigure separate relying party trusts for employees and partners, each with its own conditional access policy that enforces MFA for employees only.
   • CUse a single relying party trust and do not enforce MFA for anyone.
   • DUse partner accounts in the employee identity provider and apply the same policies.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does the principle of least privilege apply to edge identity in a zero trust model?

   • AIt grants all users the same level of access to simplify management
   • BIt restricts each identity to only the permissions necessary for its role or function
   • CIt eliminates the need for authentication for edge devices
   • DIt requires all identities to use multi-factor authentication at all times
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security architect is designing access control for edge devices that connect to a central management plane. The architect wants to implement least privilege so that each device can only perform its specific function. Which approach is the most aligned with zero trust principles?

   • AGive all devices the same role with broad permissions to simplify management.
   • BIssue each device a unique identity and assign permissions based on the device's role using attribute-based access control (ABAC).
   • CUse network segmentation to isolate devices and allow all traffic within the segment.
   • DAuthenticate devices with a shared certificate and rely on the device's IP address for authorization.
   Reveal Solution Discussion Select an answer first