nerdexam
CompTIA

CV0-002 · Question #519

A user cannot consume SaaS services while working remotely. IP whitelisting is implemented to connect to a SaaS provider as a security mechanism. Which of the following describes the MOST likely reaso

The correct answer is A. The user is not utilizing VPN to connect to the home office.. When IP whitelisting is used for SaaS access and a remote user cannot connect, the most probable cause is that the user is not utilizing a VPN to route traffic through an approved corporate IP address.

Troubleshooting

Question

A user cannot consume SaaS services while working remotely. IP whitelisting is implemented to connect to a SaaS provider as a security mechanism. Which of the following describes the MOST likely reason why the user cannot access the SaaS resources?

Options

  • AThe user is not utilizing VPN to connect to the home office.
  • BThe user account does not exist in the SaaS provider.
  • CThe user account is not assigned the correct role in RBAC policy.
  • DThe user account has consumed all of the available subscriptions.

How the community answered

(42 responses)
  • A
    67% (28)
  • B
    10% (4)
  • C
    5% (2)
  • D
    19% (8)

Why each option

When IP whitelisting is used for SaaS access and a remote user cannot connect, the most probable cause is that the user is not utilizing a VPN to route traffic through an approved corporate IP address.

AThe user is not utilizing VPN to connect to the home office.Correct

IP whitelisting restricts access to SaaS services only from pre-approved IP addresses; if a remote user is not using a VPN, their internet traffic will originate from their personal, typically non-whitelisted home IP address, causing the connection to be blocked.

BThe user account does not exist in the SaaS provider.

If the user account did not exist, the user would likely encounter an authentication error, not an IP-related access block.

CThe user account is not assigned the correct role in RBAC policy.

Incorrect RBAC policy would typically affect what resources a user can access or actions they can perform *within* the SaaS service, rather than preventing the initial connection based on IP address.

DThe user account has consumed all of the available subscriptions.

Consuming all subscriptions relates to organizational billing or provisioning limits and would not typically manifest as an IP whitelisting access issue for an individual user.

Concept tested: IP Whitelisting and VPN for remote access

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/network-best-practices#ip-whitelisting

Topics

#SaaS Access#IP Whitelisting#RBAC#Access Control#Troubleshooting

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice