3.4 Explain How Next-Generation Trust Security (NGTS) Supports Identity Governance, Trust Relationships, and Adaptive Security Decisions Across the Enterprise Platform NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is setting up NGTS to manage access for a partner organization. The partner uses a different identity provider (IdP). The security team wants to establish a trust relationship so that partner users can access the company's applications. The partner's IdP will assert the user's identity and group memberships. What is the most important configuration to ensure this trust relationship is secure?

   • AConfigure NGTS to trust only SAML assertions from the partner's IdP that are signed with a trusted certificate.
   • BConfigure NGTS to require the partner's IdP to use the same authentication method as the company.
   • CConfigure the partner's IdP to use the same user accounts as the company's directory.
   • DConfigure NGTS to accept any SAML assertion from any IdP.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is an example of context that NGTS might use to make an adaptive security decision?

   • AThe user's favorite color
   • BThe user's preferred language
   • CThe user's current location and device posture
   • DThe user's social media activity
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is using NGTS to manage access to a legacy application that does not support modern authentication protocols like SAML or OIDC. The security team wants to enable SSO for this application. What is the most appropriate approach?

   • AStore the legacy application's password in NGTS and automatically fill it in during login.
   • BUse NGTS to federate the legacy application through a connector or gateway that translates modern authentication to the legacy protocol.
   • CReplace the legacy application with a modern SaaS application that supports SAML.
   • DRequire users to log in separately to the legacy application with their enterprise credentials.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of adaptive security decisions in NGTS?

   • ATo apply the same security policy to all users regardless of context
   • BTo rely solely on static rules defined by administrators
   • CTo adjust security controls dynamically based on the current context and risk level
   • DTo make security decisions only during initial access, not during ongoing sessions
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization uses NGTS to manage access to a partner portal. The trust relationship between NGTS and the partner's identity provider is established via SAML. A partner user attempts to access the portal, but the access is denied. The NGTS logs show that the SAML assertion is valid, but the user's device posture is unknown. What is the most likely reason for the denial?

   • ANGTS cannot verify the device posture, so it treats the request as high-risk and denies access.
   • BThe partner portal is not configured to accept SAML assertions from NGTS.
   • CThe partner's identity provider is not trusted by NGTS.
   • DThe partner user's account is locked due to multiple failed login attempts.
   Reveal Solution Discussion Select an answer first