Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CCSP Exam - Topic 2 Question 69 Discussion

Posted by Mollie on Mar 30, 2023 at 04:05 AM

What provides the information to an application to make decisions about the authorization level appropriate when granting access?

Suggested Answer: D

According to ''The NIST Definition of Cloud Computing,'' in SaaS, ''The capability provided to the consumer is to use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based e-mail), or a program interface. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.''


Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
33 comments · newest first
TU
Tu 10 months ago
Just to clarify, does the User have any say in this?
JO
Jordan 11 months ago
I thought Federation played a bigger role in this.
MO
Mozell 11 months ago
Wait, are we sure it's not the Relying party?
TR
Tran 11 months ago
I agree, the Identity Provider is key for authorization levels.
AR
Ardella 11 months ago
It's definitely the Identity Provider that gives that info.
TE
Tegan 12 months ago
Federation sounds familiar, but I can't recall if it directly relates to authorization levels. I might lean towards D as well.
NE
Nenita 12 months ago
I feel like I read that the user is involved in the process, but I don't think they provide the information directly.
LE
Lea 12 months ago
I'm not entirely sure, but I remember something about relying parties in a similar practice question. Could it be B?
MA
Markus 1 year ago
I think the answer might be D, Identity Provider, since it usually handles user authentication and provides info for access decisions.
MA
Marg 1 year ago
The key here is that the question is asking what the employer CANNOT collect. I think the answer is C, since information about an individual's children doesn't seem relevant for pre-employment.
DE
Desmond 1 year ago
This kinda reminds me of a practice test question where I had to verify port configurations. Maybe it's related to a trunk or access port issue?
TA
Tamesha 1 year ago
Okay, I've got this. The answer is definitely D - Prepare individual envelopes. That's the only way to ensure each person gets their own personalized envelope, which is important for a professional mailing like this.
LO
Loise 1 year ago
I have some doubts about EWQR. I feel like I might have overlooked its effectiveness during my studies.
NO
Norah 1 year ago
Okay, let's see. The key is understanding how database shadowing works in AACC HA. I think I can work this out.
CH
Charisse 1 year ago
Hold up, is this a trick question? I bet the answer is 'All of the above'.
JA
Jamal 1 year ago
The Identity Provider, definitely. Unless you're living in the Matrix, that is.
SO
Solange 1 year ago
User, duh. They're the ones who need access, aren't they?
SH
Shad 1 year ago
↳ replying to Solange
I think it's a combination of both the User and the Identity Provider working together.
HA
Hassie 1 year ago
↳ replying to Solange
True, the Identity Provider does provide information for authorization decisions.
KE
Kendra 1 year ago
↳ replying to Solange
But what about the Identity Provider? They play a role in granting access too.
JA
Jaclyn 1 year ago
↳ replying to Solange
User, of course. They are the ones who need access.
JE
Jessenia 1 year ago
Hmm, I think it's the Federation. Gotta love those identity management protocols!
AL
Alayna 1 year ago
↳ replying to Jessenia
I'm pretty sure it's the Relying party.
EL
Elke 1 year ago
↳ replying to Jessenia
I believe it's the Identity Provider.
RO
Ronny 1 year ago
↳ replying to Jessenia
I think it's the Federation.
WI
Wilbert 1 year ago
I'm not sure, but I think it could also be C) Federation because it involves multiple parties sharing information.
BR
Brigette 2 years ago
Identity Provider, of course! That's where the authorization info comes from.
NA
Naomi 1 year ago
↳ replying to Brigette
Got it. Thanks for clarifying!
MI
Michael 1 year ago
↳ replying to Brigette
Yes, that's correct. The Identity Provider supplies the necessary information for access decisions.
AR
Aron 1 year ago
↳ replying to Brigette
So, the application gets the authorization level from the Identity Provider?
SH
Shonda 1 year ago
↳ replying to Brigette
Identity Provider is the one that provides the authorization info.
KA
Kayleigh 2 years ago
I agree with Natalya. The Identity Provider provides the necessary information for authorization.
NA
Natalya 2 years ago
I think the answer is D) Identity Provider because it verifies the user's identity.
0/2000 characters

Save Cancel