CISSP PRACTICE QUESTIONS – 20210929

Effective CISSP Questions

Which of the following is most commonly used to automate the process of creating and managing entities and attributes across information systems when a new employee gets onboard? (Wentz QOTD)
A. SPML
B. SAML
C. XACML
D. OIDC

Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

My suggested answer is A. SPML.

Wentz’s book, The Effective CISSP: Security and Risk Management, helps CISSP and CISM aspirants build a solid conceptual security model. It is a tutorial for information security and a supplement to the official study guides for the CISSP and CISM exams and an informative reference for security professionals.

In telecommunication, provisioning involves the process of preparing and equipping a network to allow it to provide new services to its users. In National Security/Emergency Preparedness telecommunications services, “provisioning” equates to “initiation” and includes altering the state of an existing priority service or capability.

Discussion of provisioning often appears in the context of virtualization, orchestration, utility computing, cloud computing, and open-configuration concepts and projects. For instance, the OASIS Provisioning Services Technical Committee (PSTC) defines an XML-based framework for exchanging user, resource, and service-provisioning information – SPML (Service Provisioning Markup Language) for “managing the provisioning and allocation of identity information and system resources within and between organizations”.

Source: Wikipedia

Reference


當新員工入職時,以下哪項最常用於將跨信息系統之創建和管理實體和屬性的過程自動化? (Wentz QOTD)
A. SPML
B. SAML
C. XACML
D. OIDC



Leave a Reply