7.2 Determine the Most Secure Approach for SaaS Application Usage Control NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary reason an organization should actively control and monitor the use of SaaS applications rather than allowing employees to adopt them freely?

   • ATo reduce the number of software licenses the organization must purchase
   • BTo prevent unsanctioned applications from introducing security, compliance, and data-leakage risks
   • CTo ensure all employees use the same operating system and device platform
   • DTo eliminate the need for any network security monitoring or firewall rules
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company wants to ensure that access to a SaaS HR system is only granted to users on the corporate network or compliant devices. Which mechanism should they use?

   • AUsing IP allowlisting in the SaaS app to restrict access to corporate IP addresses.
   • BEnforcing MFA for all users, which is sufficient to control access.
   • CRequiring users to use a VPN for all access to the SaaS app.
   • DConditional access policies that evaluate network location and device compliance before granting access.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company uses a SaaS file-sharing service. They need to prevent sensitive data from being shared externally, but they also need to allow sharing with specific partners. What is the best approach?

   • AMonitor external sharing and revoke access if sensitive data is found.
   • BConfigure DLP policies that block external sharing of sensitive data, but allow sharing with approved partner domains.
   • CDisable external sharing entirely for all users.
   • DRequire users to manually encrypt files before sharing externally.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company discovers several unsanctioned SaaS apps in use. Some apps have strong security features, while others are risky. The company wants to minimize risk without disrupting business. What is the best approach?

   • AClassify each app based on risk, then allow high-security apps, block high-risk apps, and require remediation for medium-risk apps.
   • BRequire all unsanctioned apps to be replaced with approved alternatives.
   • CBlock all unsanctioned apps immediately to eliminate risk.
   • DAllow all apps but monitor them for a month before deciding.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is concerned about the risk of employees using unsanctioned file-sharing apps that may not have adequate security controls. What is the primary risk they are trying to mitigate?

   • AReduced employee productivity due to learning multiple tools.
   • BCompatibility issues between different file formats.
   • CIncreased licensing costs due to multiple overlapping subscriptions.
   • DData leakage through apps that lack enterprise-grade security and compliance controls.
   Reveal Solution Discussion Select an answer first