SY0-501 Question #317: Real Exam Question with Answer & Explanation

Question

Which of the following would enhance the security of accessing data stored in the cloud? (Select TWO)

Options

• ABlock level encryption
• BSAML authentication
• CTransport encryption
• DMultifactor authentication
• EPredefined challenge questions
• FHashing

Explanation

This question identifies authentication mechanisms that directly enhance the security of user access to cloud-stored data.

Common mistakes.

• A. Block level encryption secures data at rest on storage volumes, protecting it from unauthorized physical storage access, but does not directly enhance the security of the user's authentication process for accessing that data.
• C. Transport encryption secures data in transit over a network, protecting it from interception during transmission, but it does not enhance the security of the user authentication mechanism itself.
• E. Predefined challenge questions are a weaker form of authentication, often susceptible to social engineering or guessing, and thus do not provide a significant enhancement to access security compared to stronger authentication factors.
• F. Hashing is primarily used for data integrity verification or for securely storing passwords (one-way encryption of the password itself), not as a direct method for a user to authenticate and gain access to data.

Concept tested. Cloud Identity and Access Management (IAM) security features

Reference. https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

No community discussion yet for this question.