A software-as-a-service (SaaS) company uses numerous non-interactive access and service accounts as part of their automated processes. They seek a strategy that minimizes potential vulnerabilities. What action should they take? Select two answers.Ignore these non-interactive accounts since they don't involve human users and focus on typical user accounts instead.Regularly rotate keys and restrict privileges on a need-to-use basis.Grant full administrative privileges to ensure smooth execution of automated processes.Use a uniform password for all service accounts to simplify monitoring and management.Establish a regular examination and audit process for these non-interactive accounts.
Question
A software-as-a-service (SaaS) company uses numerous non-interactive access and service accounts as part of their automated processes. They seek a strategy that minimizes potential vulnerabilities. What action should they take? Select two answers.Ignore these non-interactive accounts since they don't involve human users and focus on typical user accounts instead.Regularly rotate keys and restrict privileges on a need-to-use basis.Grant full administrative privileges to ensure smooth execution of automated processes.Use a uniform password for all service accounts to simplify monitoring and management.Establish a regular examination and audit process for these non-interactive accounts.
Solution
The two actions that the SaaS company should take to minimize potential vulnerabilities are:
- Regularly rotate keys and restrict privileges on a need-to-use basis.
- Establish a regular examination and audit process for these non-interactive accounts.
Ignoring these non-interactive accounts can lead to security vulnerabilities as they can be exploited by malicious actors. Granting full administrative privileges can also lead to security risks as it can provide unnecessary access to sensitive information. Using a uniform password for all service accounts is not a good practice as it can lead to a single point of failure.
Similar Questions
A software development company wants to implement a system that records all user actions within their development environment. What IAAA principle would help achieve this objective?1.0 Marks Intrusion Detection System (IDS)AuthenticationAuthorizationAccountabilityIdentification
You are the IT manager of a medium-sized company. You want to ensure that employees only have access to the data and systems necessary for their job roles. What administrative control should you implement?1.0 MarksEncryptionLeast Privilege Antivirus SoftwareBiometric AuthenticationFirewall
When accessing Software as a service (SaaS), end-users access the application via internet access (cloud).Question 8AnswerTrueFalse
To safely enable SaaS usage in your organization, start by clearly defining the SaaS applications that should be used and which behaviors within those applications are allowed. Which category of applications are not allowed by default, but still can be controlled with granular policies?1 pointTolerated UnsanctionedSanctioned Permitted
SaaSSoftware as a Service (SaaS) is a form of application delivery that relieves users of the burden of software maintenance while making development and testing easier for service providers.
Upgrade your grade with Knowee
Get personalized homework help. Review tough concepts in more detail, or go deeper into your topic by exploring other relevant questions.