Examkin

Soru

Zorluk: KolayIdentity and Access Management Architecture

An enterprise wants to allow its employees to securely sign in to multiple external cloud-based vendor applications using their central corporate identity provider, ensuring that user passwords are never transmitted to or stored by the external vendors. Which Identity and Access Management (IAM) architectural solution best fulfills this requirement?

  1. Federated Identity Management using Single Sign-On protocolsCevap
  2. B
    Role-Based Access Control matrix configured within each external SaaS portal
  3. C
    Network Access Control gateway enforcing 802.1X port security at the perimeter
  4. D
    Mandatory Access Control policy applied directly to the cloud application servers

Cevap

Federated Identity Management using Single Sign-On protocols is the correct architectural solution.
Federated Identity Management allows organizations to establish single sign-on across separate administrative domains. Through standards like SAML 2.0 or OpenID Connect, the central Identity Provider authenticates the user locally and issues a cryptographically signed assertion token to external cloud applications, preventing credential exposure.

Adım Adım Çözüm

1
Analyze the enterprise requirement
The requirement calls for centralized identity verification across external domain boundaries without sharing sensitive passwords.
Security best practices demand establishing trust relationships with external cloud services via centralized assertions.
2
Evaluate IAM architectural solutions for cross-domain identity sharing
Federated Identity Management (using standards such as SAML or OIDC) relies on token-based assertions from an Identity Provider (IdP) to Service Providers (Relying Parties).
Tokens allow external vendors to validate user identity securely without ever receiving password credentials.

Anahtar Kavram

Federated Identity Management and Cross-Domain Trust Architecture
Tahmini Süre:45s
Bu soruyu puanla

Konular

Identity and Access Management Architecture

Bu konudan daha fazla soru