When undertaking a cloud migration of multiple SaaS applications, an organization's systems administrators struggled with the complexity of extending identity and access management to cloud-based…

Question

Options

• ACASB
• BSASE
• CZTNA
• DSWG

• A
  10% (3)
• B
  3% (1)
• C
  83% (24)
• D
  3% (1)

Explanation

ZTNA (Zero Trust Network Access) is correct because it is specifically designed to extend identity and access management (IAM) to cloud and remote resources by enforcing strict identity verification before granting access to any application or asset, regardless of location. It replaces legacy perimeter-based models with a user/identity-centric approach, making it ideal for managing access across multiple SaaS applications during a cloud migration.

Why the distractors are wrong:

• CASB (Cloud Access Security Broker) focuses on monitoring and enforcing security policies between users and cloud services (e.g., data loss prevention, shadow IT visibility), not primarily on simplifying identity and access management.
• SASE (Secure Access Service Edge) is a broader networking and security framework that includes ZTNA as a component, but selecting the entire SASE model would be over-engineering the solution when the specific problem is IAM complexity.
• SWG (Secure Web Gateway) filters web traffic and enforces acceptable use policies, but does not address identity-based access control for cloud applications.

Memory Tip: Think of ZTNA = "Zero Trust = Identity First" - whenever a question mentions identity and access management challenges in the cloud, ZTNA is your go-to answer, because "trust no one, verify everyone" is fundamentally an identity-driven concept.

No community discussion yet for this question.