CAS-001 · Question #251
200 internal custom web applications having standalone identity stores. In order to reduce costs and improve operational efficiencies a project has been initiated to implement a centralized security…
The correct answer is A. Build an organization-wide fine grained access control model stored in a centralized policy data store. D. Implement a web access controlled reverse proxy and centralized directory model providing coarse grained E. Implement automated provisioning of identity information; coarse grained, and fine grained access control. The requirements call for centralization, standardization, automation, and reusability. (A) A centralized fine-grained access control policy store standardizes authorization across all 200 apps and provides a reusable model. (D) A reverse proxy-based web access control solution…
Question
200 internal custom web applications having standalone identity stores. In order to reduce costs and improve operational efficiencies a project has been initiated to implement a centralized security infrastructure. The requirements are as follows:
- Reduce costs
- Improve efficiencies and time to market
- Manageable
- Accurate identity information
- Standardize on authentication and authorization
- Ensure a reusable model with standard integration patterns
Which of the following security solution options will BEST meet the above requirements? (Select THREE).
Options
- ABuild an organization-wide fine grained access control model stored in a centralized policy data store.
- BImplement self service provisioning of identity information, coarse grained, and fine grained access control.
- CImplement a web access control agent based model with a centralized directory model providing coarse
- DImplement a web access controlled reverse proxy and centralized directory model providing coarse grained
- EImplement automated provisioning of identity information; coarse grained, and fine grained access control.
- FMove each of the applications individual fine grained access control models into a centralized directory with
- GImplement a web access control forward proxy and centralized directory model, providing coarse grained
How the community answered
(61 responses)- A59% (36)
- B7% (4)
- C21% (13)
- F10% (6)
- G3% (2)
Explanation
The requirements call for centralization, standardization, automation, and reusability. (A) A centralized fine-grained access control policy store standardizes authorization across all 200 apps and provides a reusable model. (D) A reverse proxy-based web access control solution with a centralized directory is the industry-standard integration pattern for web applications - it sits in front of apps, enforces coarse-grained access, and requires no per-app agent installation, which dramatically reduces cost and time-to-market. (E) Automated provisioning ensures identity information is accurate and current while reducing manual effort and operational cost - far more scalable than self-service (B). Option C is eliminated because an agent-based model (versus reverse proxy) requires deploying and maintaining an agent on all 200 apps, increasing complexity. Option F is wrong because simply centralizing each app's individual fine-grained model does not standardize or reduce redundancy. Option G is wrong because a forward proxy is used for outbound traffic, not for protecting internal apps from inbound access - a reverse proxy (D) is the correct architecture here.
Topics
Community Discussion
No community discussion yet for this question.