A government department has developed an efficient and elastic software development environment that can be used as a cloud services offering. The department is actively marketing the capability to other government agencies. The other agencies are evaluating this service offering and are concerned about identity compliance.
What can the department do to alleviate concerns about trust within their service offering?
A. Establish a single sign-on capability in the cloud and federate with each subscribing agency using strong authentication policies and end-point access control.
B. Harden the cloud service infrastructure stack. Use geographic location to ensure agencies can only access servers that host their development environment.
C. Identify the confidentiality, integrity and availability requirements for agency data. Use rights management software to restrict access to the agency’s own data.
D. Provide a self-service portal with role-based authentication. Require users to re-authenticate every 30 minutes.
|
Download Printable PDF. VALID exam to help you PASS. |
 |