7.2 Determine the Most Secure Approach for SaaS Application Usage Control NETWORK-SECURITY-ARCHITECT Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which activity is part of SaaS application governance?

   • ARegularly reviewing the list of approved SaaS applications and their security posture
   • BDeleting all user accounts in SaaS applications at the end of each quarter
   • CAllowing employees to choose their own security settings for each application
   • DAutomatically approving any application requested by a department head
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   When evaluating the security posture of a SaaS application, which feature is most important to verify?

   • AThe number of third-party integrations available
   • BThe application's mobile app rating in app stores
   • CSupport for multi-factor authentication (MFA)
   • DThe application's color scheme and user interface design
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company's security team discovers several unsanctioned SaaS apps in use. They want to establish a process to decide which apps to allow, block, or require remediation. What should they do?

   • AAllow all apps but require users to sign an acceptable use policy.
   • BBlock all unsanctioned apps immediately to eliminate risk.
   • CReview each app's privacy policy and make a decision based on that alone.
   • DCreate a risk-based classification for discovered apps and define actions (allow, block, or remediate) based on the risk level.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company wants to reduce the risk of shadow IT by making it easier for employees to use approved SaaS apps. What is the most effective approach?

   • ABlock all unknown SaaS apps at the firewall.
   • BIncrease the frequency of CASB monitoring to detect shadow IT faster.
   • CSend a memo reminding employees of the acceptable use policy.
   • DProvide a self-service portal where employees can request access to pre-approved SaaS apps.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A multinational company wants to formalize the process for employees to request and use new SaaS applications. They need to ensure that all apps are reviewed for security and compliance before approval. What should they establish?

   • AA policy that employees can use any SaaS app as long as they sign an acceptable use agreement.
   • BA SaaS governance committee that reviews and approves applications based on security and compliance criteria.
   • CA list of approved SaaS applications that employees can choose from without further review.
   • DA technical control that blocks all SaaS apps except those automatically discovered by the CASB.
   Reveal Solution Discussion Select an answer first