7.2 Determine the Most Secure Approach for SaaS Application Usage Control NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is adopting a new SaaS HR application. The security policy requires that all access be centrally controlled and that users must authenticate with the corporate identity provider. Which approach best meets this requirement?

   • AUse the SaaS app's built-in MFA and allow users to self-register with their corporate email.
   • BConfigure the SaaS app to require SAML SSO with the corporate IdP and enforce MFA via conditional access.
   • CCreate local user accounts in the SaaS app with strong passwords and require password changes every 90 days.
   • DIntegrate the SaaS app with the corporate directory using SCIM for user provisioning only.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is migrating to a new SaaS HR platform. They want to enforce MFA for all users, but some legacy integrations use service accounts that cannot support MFA. What is the best approach?

   • ACreate separate accounts for each integration and enforce MFA on those accounts.
   • BRequire MFA for service accounts by using certificate-based authentication.
   • CDisable MFA for all users to avoid complexity.
   • DUse conditional access to require MFA for interactive users, but exclude service accounts and compensate with IP restrictions and strong secrets.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is evaluating a new SaaS project management tool. The security team must assess its security posture before approval. Which combination of features should they prioritize?

   • AVendor reputation, number of customers, and years in business.
   • BIntegration with existing productivity tools, API availability, and custom reporting.
   • CA user-friendly interface, mobile app availability, and low cost per user.
   • DEncryption at rest and in transit, support for SSO/MFA, and compliance certifications relevant to the industry.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which practice is a SaaS security best practice?

   • AApplying the principle of least privilege to user permissions
   • BSharing admin credentials among team members for convenience
   • CDisabling audit logs to reduce storage costs
   • DGranting all users the same level of access to simplify administration
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company is evaluating a SaaS app that offers encryption and MFA but lacks SOC 2 certification. The app will process customer data that is not highly regulated. What is the most appropriate decision?

   • AApprove the app with compensating controls, such as additional monitoring and user training, given the low regulatory requirement.
   • BApprove the app without any additional controls because encryption and MFA are sufficient.
   • CRequire the vendor to obtain SOC 2 certification before approval.
   • DReject the app solely because it lacks SOC 2 certification.
   Reveal Solution Discussion Select an answer first