3.4 Explain How Next-Generation Trust Security (NGTS) Supports Identity Governance, Trust Relationships, and Adaptive Security Decisions Across the Enterprise Platform NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is integrating NGTS with its existing single sign-on (SSO) solution to provide a unified authentication experience. The SSO solution currently uses SAML to authenticate users to web applications. The company wants to extend this to include device posture checks. Which NGTS integration is most appropriate?

   • AConfigure the SSO solution to bypass NGTS for device posture checks.
   • BIntegrate NGTS with the SSO solution to receive device posture information and enforce access policies.
   • CReplace the SSO solution with NGTS's built-in authentication.
   • DUse a separate authentication flow for device posture checks.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In the context of NGTS identity governance, what is the primary purpose of managing user identities and access policies across the enterprise platform?

   • ATo provide a single sign-on experience for all cloud applications
   • BTo automatically grant all users administrative privileges for operational efficiency
   • CTo eliminate the need for user authentication by using device certificates
   • DTo ensure that users have the appropriate access to resources based on their role and context
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is deploying NGTS to manage access to its SaaS applications. The security team wants to establish a trust relationship between the NGTS identity provider and the SaaS applications so that users can access them without separate credentials. Which configuration is required to establish this trust relationship?

   • AInstall the NGTS agent on every user's device to authenticate them to the SaaS applications.
   • BManually provision user accounts in each SaaS application with the same password as the enterprise directory.
   • CCreate a direct network connection between NGTS and each SaaS application's data center.
   • DConfigure the SaaS applications to use NGTS as an identity provider via SAML or OIDC.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is implementing NGTS to manage access to its cloud applications. The identity team wants to ensure that when a user changes roles within the company, their access rights are updated automatically to reflect the new role. Which NGTS capability is essential for this requirement?

   • AA periodic review process where administrators audit access rights quarterly.
   • BA self-service portal for users to request access to applications.
   • CStatic group membership that requires manual updates by administrators.
   • DDynamic group membership based on user attributes from the enterprise directory.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An organization is configuring NGTS to protect access to a high-value application. The security team wants to implement a policy that requires step-up authentication when a user's risk score is elevated, but they are concerned about user experience. They want to minimize the number of step-up prompts for legitimate users. Which approach should they take?

   • ARequire step-up authentication for all users regardless of risk score.
   • BDisable step-up authentication entirely to avoid any user prompts.
   • CSet a high risk score threshold for triggering step-up authentication, so only users with very high risk are prompted.
   • DSet a low risk score threshold for triggering step-up authentication, so more users are prompted.
   Reveal Solution Discussion Select an answer first