An organization's security architects determined that all authentication and authorization requests need to be validated before any employee can access corporate resources. Because of this, the organization needs to implement a system that stores and manages the employees' credential information and then validates any requests sent. Which system would allow the organization to meet the architects' requirements?
Correct Answer: D
AnIdentity Provider (IdP)is a system that stores and manages identity information and validates authentication and authorization requests. IdPs are critical in cloud and hybrid environments, supporting protocols such as SAML, OAuth, and OpenID Connect for federated access. An HSM manages encryption keys, not identities. Zero Trust is a security philosophy requiring continuous verification, but the system that enforces authentication is the IdP. A bastion host provides secure administrative access but does not manage identity. By using an IdP, organizations centralize credential management, enforce multifactor authentication, and integrate with Single Sign-On (SSO). This reduces password fatigue, increases security, and ensures consistent access control policies across applications and services.
Question 72
An organization is considering a cloud provider that has multivendor pathway connectivity. What does this feature provide?
Correct Answer: D
Multivendor pathway connectivity refers to a cloud provider's ability to maintain connections with multiple internet service providers (ISPs). This ensures redundancy and reduces the risk of outages due to a single ISP failure. Electric providers, fuel vendors, and HVAC contracts support facility resilience, but they are not directly tied to connectivity. The purpose of multivendor pathways is specifically to guarantee uninterrupted network access and resilience for customer workloads. By maintaining ISP redundancy, cloud providers improve availability and meet SLA commitments. This capability is especially critical for enterprises requiring high uptime or operating in regions where connectivity disruptions are common. It also provides flexibility in bandwidth management and routing optimization.