Explanation/Reference:
Explanation:
Identity management is the combination of business process and technology used to manage data on IT systems and applications about users. Managed data includes user objects, identity attributes, security entitlements and authentication factors.
Enterprises manage identity data about two broad kinds of users:
Insiders: including employees and contractors. They often access multiple internal systems and their

identity profiles are relatively complex.
Outsiders: including customers, partners and vendors. There are normally many more outsiders than

insiders.
One of the challenges presented by Identity management is scalability.
Enterprises manage user profile data for large numbers of people. There may be tens of thousands of insiders and hundreds of thousands of outsiders.
Any identity management system used in this environment must scale to support the data volumes and peak transaction rates produced by large user populations.
Incorrect Answers:
A: Increasing the number of points of failures is not key management challenge regarding identity management solutions. There should be no single points of failure but this would be more of a concern for the IT department than management.
B: Users not being able to "recycle" their password for different applications is not a concern for management.
C: A working scalable identity management system is more important to management than the cost. The resource requirement for identity management technologies is not that much when compared to the cost of other systems.
References:
http://hitachi-id.com/password-manager/docs/defining-enterprise-identity-management.html

Building in appropriate levels of fault tolerance is a secure design principle for a new product. Fault tolerance is the ability of a system or a component to continue functioning correctly and reliably in the event of a failure, error, or disruption, such as a hardware malfunction, a power outage, or a network attack. Building in appropriate levels of fault tolerance can enhance the security, availability, and resilience of a system or a product, by providing mechanisms such as redundancy, backup, recovery, failover, or self-healing. Building in appropriate levels of fault tolerance can also prevent or mitigate the impact of potential threats or vulnerabilities, and ensure the continuity of the business operations and services. The other options are not secure design principles for a new product, as they either do not enhance the security, availability, or resilience of the system or the product, or do not follow the best practices or standards for software development.
References: CISSP - Certified Information Systems Security Professional, Domain 3. Security Architecture and Engineering, 3.5 Implement and manage engineering processes using secure design principles, 3.5.1 Understand the fundamental concepts of security models, 3.5.1.1 Fault tolerance; CISSP Exam Outline, Domain 3. Security Architecture and Engineering, 3.5 Implement and manage engineering processes using secure design principles, 3.5.1 Understand the fundamental concepts of security models, 3.5.1.1 Fault tolerance

Section: Security Operations

The correct answer is reducing the amount of data to be evaluated by definition. Answer "Limit the number of letters in a password" is incorrect because clipping levels do not relate to letters in a password. Answer "Set thresholds for voltage variations" is incorrect because clipping levels in this context have nothing to do with controlling voltage levels. Answer "Limit errors in callback syste" is incorrect because they are not used to limit callback errors.