SecGov (B)

Question 1

Mechanisms for ______ and _______ play a critical part guaranteeing the integrity of system integration while also adhering to governance standards

Answer 1

authentication and authorization

Question 2

What can you apply to authentication and authorization in system integration?

Answer 2

OAuth 2.0 for API Authentication and Authorization

Question 3

An OAuth 2.0 is used to protect APIs by allowing users or applications to?

Answer 3

grant limited access to protected resources without sharing actual credentials

Question 4

What does OAuth 2.0 define to ensure secure and restricted access?

Answer 4

Resource owner, client and authorization server

Question 5

What might you apply to a Role-Based Access Control (RBAC)?

Answer 5

RBAC for Access Control

Question 6

What does RBAC for Access Control do within an integation system?

Answer 6

Control Access to Resources and Capabilities by defining rights associated with each role

Question 7

How is RBAC exemplified in healthcare?

Answer 7

Physicians have access to patient records while restricting same data from other staff members

Question 8

It is a token format that is small and self-contained and may be used for authentication and authorization

Answer 8

JSON Web Tokens (JWT) for Stateless Authentication

Question 9

In a JWT-based authentication architecture, they are used to authenticate and authorize users or services by?

Answer 9

Decoding claims to confirm their identity and granted access levels

Question 10

How might a JWT be applied in a mobile app?

Answer 10

App receives JWT after login and include it in all subsequent API requests

Question 11

Makes it possible to conduct safe authentication and authorization procedures across a number of different systems and organizations

Answer 11

Federated Identity Management

Question 12

What might be applied to a Federated Identity Management?

Answer 12

Single Sign-On (SSO) with SAML (Security Assertion Markup Language)

Question 13

Utilized for secure identity assertion and single sign-on, allowing users to log n once to access all supported systems

Answer 13

SAML (Security Assertion Markup Language)

Question 14

T or F
In a SSO with SAML, there is still need for multiple authentication steps, for better security, without re-entering credentials.

Answer 14

False. In an SSO with SAML, it eliminates the need for multiple authentication steps, providing seamless access to interconnected platforms without re-entering credentials

Question 15

SAML may be used to implement SSO on an enterprise’s intranet if…

Answer 15

it integrates with multiple enterprise platforms