Your company has a single Atlassian Cloud organization.Atlassian Access discovered "shadow IT".Which statement explains how this occurred?
Answer(s): A
Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1. Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2. Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1. A managed user is a user whose account is on a domain that is verified by an organization3. A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization. A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5. A product belongs to a site, which is a collection of products that share a URL and administration settings6. A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7. A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins. Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is. Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.
Automatic product discovery in Atlassian AccessAtlassian Access: Enhanced Cloud Data Security & Governance What is a managed account?Verify a domain to manage accountsWhat is a product?Understand Atlassian sites and organizationsWhat is an Atlassian organization?
IT had written a script to return a list of domains in your Cloud organization. That script is no longer needed and you would like to ensure the script can no longer access that information.What should you do?
Answer(s): C
If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script. An API key is a token that allows you to manage your organization via the admin APIs1. You can create, view, and revoke API keys from the organization settings2. Revoking an API key will invalidate it and prevent any further requests using that key2.The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script. It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script. It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script. It will only affect the IP addresses that are allowed to access your organization and products5.
Manage an organization with the admin APIsCreate and revoke API keysVerify a domain to manage accountsRegenerate your security keySet up an IP allowlist
You just created a sandbox for Jira Service Management and copied data from production.Which statement is definitely true?
When you copy data from production to a sandbox, the user permissions and groups are also copied. This means that project admins from production can access and manage the same projects in the sandbox. However, customers and agents from production cannot log into the same portals or projects in the sandbox, because we disable app links, external email notifications, and integrations with Bitbucket and Slack. Attachments and comments are also not copied to the sandbox, unless you choose to copy with media files.Reference = Manage product sandboxes, Copy data to sandbox
Ahmed, a new org admin, made a change to organization settings that caused a problem in Jira Software.When users respond to notifications, the replies are no longer being sent to "support@acme.com" but instead to "jira@acme.atlassian.net".What change did Ahmed make?
Answer(s): E
Updating the product URL changes the email address from which notifications are sent and received. Ahmed should have configured the sender email address for the Jira Software project to use the custom email address "support@acme.com".
Configure email notifications, Update a product URL to a new URL
Your organization only has the following two products:Which feature can you configure in your organization?
Answer(s): D
Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings. Organization insights is available for all Atlassian cloud products and plans1.
View organization insights
Post your Comments and Discuss ATLASSIAN ACP-520 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ACP-520 content, but please register or login to continue.