SY0-501 · Question #317
Which of the following would enhance the security of accessing data stored in the cloud? (Select TWO)
The correct answer is B. SAML authentication D. Multifactor authentication. This question identifies authentication mechanisms that directly enhance the security of user access to cloud-stored data.
Question
Which of the following would enhance the security of accessing data stored in the cloud? (Select TWO)
Options
- ABlock level encryption
- BSAML authentication
- CTransport encryption
- DMultifactor authentication
- EPredefined challenge questions
- FHashing
How the community answered
(41 responses)- A15% (6)
- B71% (29)
- C7% (3)
- E2% (1)
- F5% (2)
Why each option
This question identifies authentication mechanisms that directly enhance the security of user access to cloud-stored data.
Block level encryption secures data at rest on storage volumes, protecting it from unauthorized physical storage access, but does not directly enhance the security of the user's authentication process for accessing that data.
SAML (Security Assertion Markup Language) authentication enhances access security by enabling federated identity and single sign-on (SSO), allowing organizations to leverage a trusted identity provider for centralized and consistent authentication to cloud services.
Transport encryption secures data in transit over a network, protecting it from interception during transmission, but it does not enhance the security of the user authentication mechanism itself.
Multifactor authentication (MFA) significantly strengthens access security by requiring users to provide two or more distinct forms of verification (e.g., password and a mobile app code) to gain access, making it much harder for unauthorized users to compromise an account.
Predefined challenge questions are a weaker form of authentication, often susceptible to social engineering or guessing, and thus do not provide a significant enhancement to access security compared to stronger authentication factors.
Hashing is primarily used for data integrity verification or for securely storing passwords (one-way encryption of the password itself), not as a direct method for a user to authenticate and gain access to data.
Concept tested: Cloud Identity and Access Management (IAM) security features
Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks
Topics
Community Discussion
No community discussion yet for this question.