CAS-005 · Question #261
A systems engineer is configuring SSO for a business that will be using SaaS applications for its remote-only workforce. Privileged actions in SaaS applications must be allowed only from corporate…
The correct answer is C. Configure device attestations and continuous authorization controls. Device attestation ensures that only corporate-approved devices can perform privileged actions in SaaS applications. Continuous authorization monitors ongoing device compliance, dynamically adjusting permissions based on security posture.
Question
A systems engineer is configuring SSO for a business that will be using SaaS applications for its remote-only workforce. Privileged actions in SaaS applications must be allowed only from corporate mobile devices that meet minimum security requirements, but BYOD must also be permitted for other activity. Which of the following would best meet this objective?
Options
- ABlock any connections from outside the business's network security boundary.
- BInstall machine certificates on corporate devices and perform checks against the clients.
- CConfigure device attestations and continuous authorization controls.
- DDeploy application protection policies using a corporate, cloud-based MDM solution.
How the community answered
(28 responses)- A4% (1)
- B7% (2)
- C79% (22)
- D11% (3)
Explanation
Device attestation ensures that only corporate-approved devices can perform privileged actions in SaaS applications. Continuous authorization monitors ongoing device compliance, dynamically adjusting permissions based on security posture.
Community Discussion
No community discussion yet for this question.