Examkin

Soru

Zorluk: OrtaIdentity and Access Management Architecture

A financial services organization is designing a modern Identity and Access Management (IAM) architecture. The organization needs to grant a third-party analytics application permission to read transaction history from its internal API on behalf of authenticated end users. Company security policy mandates that end-user credentials must never be exposed to or stored by the third-party application, and access rights must be scoped specifically for API data delegation without transferring identity authentication assertions. Which of the following identity and access management frameworks should the security architect select to meet these requirements?

  1. OAuth 2.0 framework utilizing authorization grant tokens to delegate scoped API accessCevap
  2. B
    SAML 2.0 service provider-initiated federation exchanging XML authentication assertions
  3. C
    Centralized RADIUS server deployment enforcing EAP-TLS mutual certificate verification
  4. D
    Kerberos ticket-granting service operating over trusted internal domain controller paths

Cevap

The OAuth 2.0 framework utilizing authorization grant tokens to delegate scoped API access is the correct solution because OAuth 2.0 is specifically tailored for delegated API access without sharing user credentials.
The correct answer specifies OAuth 2.0 utilizing authorization grant tokens. OAuth 2.0 is designed specifically for delegated authorization, allowing a third-party application to request limited access (scopes) to a user's resources hosted by an HTTP service without requiring the user to disclose their credentials to the application.

Adım Adım Çözüm

1
Analyze the core architectural requirements from the scenario.
Identified key requirements: third-party access delegation on behalf of a user, API-level authorization scoping, and zero exposure of user credentials to the third-party application.
Security controls must specifically address resource access delegation rather than primary identity federation or network access control.
2
Evaluate protocol suitability against delegated access requirements.
OAuth 2.0 provides access tokens specifically scoped for API resources using authorization codes, eliminating user credential exposure.
OAuth 2.0 is the industry standard framework for API authorization delegation.

Anahtar Kavram

Delegated API Authorization with OAuth 2.0
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Identity and Access Management Architecture

Bu konudan daha fazla soru