3.4 Explain How Next-Generation Trust Security (NGTS) Supports Identity Governance, Trust Relationships, and Adaptive Security Decisions Across the Enterprise Platform NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does NGTS integrate with other enterprise platform components to support identity governance?

   • ABy operating as a standalone system that does not interact with other components
   • BBy synchronizing identity data with directory services and enforcing policies across integrated applications
   • CBy replacing all existing identity management systems
   • DBy requiring all applications to be rewritten to use NGTS APIs
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company wants to integrate NGTS with its existing identity governance platform to automate the provisioning and deprovisioning of user access rights. The goal is to ensure that when an employee leaves the company, their access to all applications is revoked automatically. Which NGTS integration capability is most relevant for this requirement?

   • AIntegration with the enterprise directory to synchronize user identities and group memberships.
   • BIntegration with the ticketing system to create support tickets for access requests.
   • CIntegration with the network access control (NAC) solution to enforce device compliance.
   • DIntegration with the security information and event management (SIEM) system for log aggregation.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is integrating NGTS with its human resources (HR) system to automate access changes based on employee status. The goal is to revoke access immediately when an employee is terminated. The HR system updates the employee's status to 'terminated' in the enterprise directory. What is the most efficient way for NGTS to enforce this?

   • AConfigure NGTS to synchronize with the enterprise directory and evaluate group membership in real-time for each access request.
   • BConfigure NGTS to perform a nightly batch synchronization of user data from the directory.
   • CConfigure NGTS to rely on the user's password expiration to revoke access.
   • DConfigure NGTS to require the HR system to directly call an API to revoke access.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization uses NGTS to manage access to a set of internal applications. The identity team wants to implement a policy that grants access to an application only if the user is a member of the 'Finance' group and their device is compliant. Which NGTS feature should be used to define this policy?

   • AConditional access policy that evaluates group membership and device compliance.
   • BA network firewall rule that allows traffic from the Finance group's IP addresses.
   • CA role-based access control (RBAC) configuration in the application itself.
   • DA group policy that assigns the application to the Finance group.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A user attempts to access a sensitive application through NGTS. The user's identity is valid, and their device is managed and compliant. However, the access request is denied. The NGTS logs show that the user's risk score is high due to an unusual access pattern. What is the most likely reason for the denial?

   • AThe application is not configured to accept NGTS authentication.
   • BThe user's identity is not synchronized to NGTS.
   • CThe user's risk score is elevated due to anomalous behavior, triggering a deny decision.
   • DThe user's device is not compliant with the organization's security policies.
   Reveal Solution Discussion Select an answer first