CV0-002 · Question #458
Recent feedback from an employee engagement survey stated that users are frustrated with multiple logins to different SaaS providers, and the cloud engineering teams is directed to address this issue
The correct answer is D. Deploy SSO and enforce VPN access to the corporate domain.. To resolve user frustration from multiple SaaS logins and enforce access from approved IP addresses, implementing Single Sign-On (SSO) combined with mandatory VPN access is the most efficient and effective solution.
Question
Recent feedback from an employee engagement survey stated that users are frustrated with multiple logins to different SaaS providers, and the cloud engineering teams is directed to address this issue and implement a solution. The security policy states that users must access the SaaS from approved IP addresses. Which of the following is the BEST and most efficient solution to deploy?
Options
- ADeploy an IPSec tunnel to each SaaS provider and enable biometric login.
- BDeploy a smart card login and change passwords to each SaaS vendor every 30 days.
- CDeploy a CASB solution and whitelist the approved SaaS applications.
- DDeploy SSO and enforce VPN access to the corporate domain.
How the community answered
(57 responses)- A16% (9)
- B9% (5)
- C30% (17)
- D46% (26)
Why each option
To resolve user frustration from multiple SaaS logins and enforce access from approved IP addresses, implementing Single Sign-On (SSO) combined with mandatory VPN access is the most efficient and effective solution.
Deploying IPSec tunnels to each SaaS provider is impractical and inefficient for multiple applications, and biometric login doesn't inherently solve the multi-login issue across different platforms without SSO.
Smart card login doesn't inherently address the multi-login problem for different SaaS providers, and frequent password changes would increase user frustration, contrary to the goal.
A CASB solution primarily provides security policy enforcement and visibility for SaaS but does not inherently provide Single Sign-On functionality or directly enforce network-level access from approved IP addresses for users accessing SaaS.
Single Sign-On (SSO) directly solves the problem of multiple logins by allowing users to authenticate once to an identity provider for access to various SaaS applications. Enforcing VPN access ensures that all traffic to SaaS providers originates from the corporate network's approved IP addresses, satisfying the security policy requirement.
Concept tested: SSO and network access control for SaaS
Source: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on
Topics
Community Discussion
No community discussion yet for this question.