CAS-005 · Question #424
A university issues badges through a homegrown identity management system to all staff and students. Each week during the summer, temporary summer school students arrive and need to be issued a…
The correct answer is D. Working with procurement and creating a requirements document to select a new IAM. Since the homegrown identity management system has already been flagged by an auditor as misaligned with industry best practices, and it must scale to handle dynamic, temporary user populations, the priority is to plan for a replacement that meets modern IAM standards…
Question
A university issues badges through a homegrown identity management system to all staff and students. Each week during the summer, temporary summer school students arrive and need to be issued a badge to access minimal campus resources. The security team received a report from an outside auditor indicating the homegrown system is not consistent with best practices in the security field. Which of the following should the security team recommend first?
Options
- AInvestigating a potential threat identified in logs related to the identity management system
- BUpdating the identity management system to use discretionary access control
- CBeginning research on two-factor authentication to later introduce into the identity management
- DWorking with procurement and creating a requirements document to select a new IAM
How the community answered
(52 responses)- A4% (2)
- B15% (8)
- C8% (4)
- D73% (38)
Explanation
Since the homegrown identity management system has already been flagged by an auditor as misaligned with industry best practices, and it must scale to handle dynamic, temporary user populations, the priority is to plan for a replacement that meets modern IAM standards (provisioning workflows, role-based access control, MFA support, audit logging, etc.). Starting with a clear requirements document ensures the new solution will address current gaps and support future needs.
Community Discussion
No community discussion yet for this question.