Define Identity Concepts SC-900 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   An organization has an on-premises Active Directory that contains user accounts, groups, and organizational units. The IT team wants to use this directory to manage access to file shares on the same network. What is the primary function of Active Directory in this situation?

   • ATo store identity information and enable authentication and authorization for network resources
   • BTo provide a backup solution for file servers
   • CTo monitor network traffic for intrusions
   • DTo replace the need for file share permissions
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company is redesigning its network security. Previously, the primary boundary was the corporate firewall. Now, employees access resources from many locations and devices. The security team wants to shift to a model where the identity of the user is the primary boundary. What is the most important implication of this shift?

   • AUsers will no longer need to authenticate
   • BAccess decisions will rely more on verifying who the user is and what they are allowed to do
   • CThe corporate firewall will no longer be needed at all
   • DAll resources will be accessible from any device
   Reveal Solution Discussion Select an answer first
4. 38application · easy

   A company is moving its internal applications to the cloud and employees will access them from anywhere. The security team is redesigning access control. Which statement best reflects the principle of 'identity as the security perimeter'?

   • AAll users should be given the same level of access to simplify management.
   • BOnly users connecting from the corporate network should be allowed to access the applications.
   • CThe cloud provider's network firewall should be the main defense against unauthorized access.
   • DAccess decisions should be based primarily on the verified identity of the user and the policies applied to that identity.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the primary purpose of a directory service in identity management?

   • ATo encrypt data at rest in databases.
   • BTo provide a firewall for network traffic.
   • CTo store and organize information about users, devices, and resources, and to enable authentication and authorization.
   • DTo host web applications for an organization.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company uses a third-party identity provider (IdP) to authenticate users for multiple software-as-a-service (SaaS) applications. An employee signs in once to the IdP and then accesses all the SaaS apps without entering credentials again. What is the primary role of the IdP in this scenario?

   • AIt stores all the application data and enforces data-loss prevention policies.
   • BIt provides a backup of the users' passwords to each application.
   • CIt replaces the need for any authorization decisions in the applications.
   • DIt verifies the user's identity and provides authentication tokens to the applications.
   Reveal Solution Discussion Select an answer first