Examkin

Soru

Zorluk: OrtaIdentity and Access Management Architecture

An enterprise security team is implementing a Zero Trust Identity and Access Management (IAM) architecture. The team needs to ensure that access to cloud resources is dynamically granted or restricted based on real-time signals, such as user risk level, device health state, and geographic location, rather than relying solely on static group memberships or initial password verification. Which of the following IAM architectural mechanisms should the team implement to satisfy this requirement?

  1. Context-aware access policiesCevap
  2. B
    Role-Based Access Control (RBAC)
  3. C
    Federated Single Sign-On (SSO)
  4. D
    Mandatory Access Control (MAC)

Cevap

Context-aware access policies
Context-aware access policies evaluate real-time signals—such as user IP location, device security posture, and behavioral risk scores—to dynamically enforce granular access controls in alignment with Zero Trust architecture principles.

Adım Adım Çözüm

1
Analyze the architecture requirements in the scenario.
Identified the need for real-time, dynamic access decisions using contextual signals like device health, location, and risk scores.
Zero Trust IAM architecture mandates continuous evaluation rather than one-time static authentication.
2
Evaluate candidate IAM access control mechanisms against dynamic requirements.
Context-aware access policies evaluate incoming telemetry continuously against policy parameters.
Static models like RBAC or MAC cannot dynamically adapt access rights based on real-time situational signals.

Anahtar Kavram

Context-Aware Conditional Access in IAM Architecture
Bu soruyu puanla

Konular

Identity and Access Management Architecture

Bu konudan daha fazla soru