nerdexam
CompTIA

CV0-003 · Question #420

Government agencies currently operate their own websites, each with its own directory services. There is a mandate to minimize IT administration. Which of the following should the cloud services archi

The correct answer is D. Reengineer the identification and authorization process.. Consolidating identity and authorization across agencies through federation or single sign-on directly eliminates the administrative overhead of maintaining separate directory services at each site.

Cloud Architecture and Design

Question

Government agencies currently operate their own websites, each with its own directory services. There is a mandate to minimize IT administration. Which of the following should the cloud services architect choose to BEST meet this mandate?

Options

  • ASet up a direct VPN tunnel between the government sites.
  • BUpgrade all stand-alone systems to use mobile technologies.
  • CUpgrade the operating systems on all of the web servers.
  • DReengineer the identification and authorization process.

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    19% (4)
  • C
    10% (2)
  • D
    62% (13)

Why each option

Consolidating identity and authorization across agencies through federation or single sign-on directly eliminates the administrative overhead of maintaining separate directory services at each site.

ASet up a direct VPN tunnel between the government sites.

Establishing VPN tunnels between sites improves network connectivity but does not consolidate or reduce the administrative burden of managing separate directory services at each agency.

BUpgrade all stand-alone systems to use mobile technologies.

Upgrading systems to mobile technologies is unrelated to the administration of identity directories and does not address the mandate to minimize IT management overhead.

CUpgrade the operating systems on all of the web servers.

Upgrading web server operating systems is a routine maintenance activity that has no impact on the number of separate directory services requiring ongoing IT administration.

DReengineer the identification and authorization process.Correct

Reengineering the identification and authorization process - for example by implementing federated identity management or a centralized SSO solution - replaces the redundant per-agency directory services with a unified identity framework. This directly addresses the mandate to minimize IT administration by reducing the number of separate directories, user accounts, and access control policies that administrators must maintain across all government websites.

Concept tested: Federated identity consolidation to reduce IT administration

Source: https://csrc.nist.gov/publications/detail/sp/800-63/3/final

Topics

#identity federation#directory services#SSO#identity management

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice