QUESTION: 193

A large organization's human resources and security teams are planning on implementing technology to eliminate manual user access reviews and improve compliance. Which of the following options is MOST likely to resolve the issues associated with user access?

Implement a Privileged Access Management (PAM) system.
Implement a role-based access control (RBAC) system.
Implement identity and access management (IAM) platform.
Implement a single sign-on (SSO) platform.

Answer(s): C

Reveal Solution Next Question

QUESTION: 194

A cloud service accepts Security Assertion Markup Language (SAML) assertions from users to exchange authentication and authorization data between security domains. However, an attacker was able to spoof a registered account on the network and query the SAML provider. What is the MOST common attack leveraged against this flaw?

Attacker leverages SAML assertion to register an account on the security domain.
Attacker forges requests to authenticate as a different user.
Attacker exchanges authentication and authorization data between security domains.
Attacker conducts denial-of-service (DoS) against the security domain by authenticating as the same user repeatedly.

Answer(s): B

Reveal Solution Next Question

QUESTION: 195

An organization is implementing security review as part of system development. Which of the following is the BEST technique to follow?

Perform incremental assessments.
Engage a third-party auditing firm.
Review security architecture.
Conduct penetration testing.

Answer(s): A

Reveal Solution Next Question

QUESTION: 196

What Hypertext Transfer Protocol (HTTP) response header can be used to disable the execution of inline JavaScript and the execution of eval()-type functions?

X-XSS-Protection
Content-Security-Policy
X-Frame-Options
Strict-Transport-Security

Answer(s): B

Reveal Solution Next Question

Free CISSP Exam Braindumps (page: 49)

QUESTION: 193

QUESTION: 194

QUESTION: 195

QUESTION: 196