As the organization requires user friendly access to a new web-based application, a software developer decides to implement Single Sign-On (SSO). The developer uses the de-facto standard for web-based applications and the implementation includes the use of a JavaScript Object Notation (JSON) web token. With this information, which is the BEST way for the software developer to establish SSO capability?

• A.The developer Inputs the user's account, the user's password, and a token.
• B.The developer uses the user's credentials stored within the web-based application.
• C.The developer uses Transport Layer Security (TLS) certificates and Open ID Connect (OIDC).
• D.The developer uses Open ID Connect (OIDC) and Open Authorization (OAuth).

Comment: *

Name: *

Email: *

Verification: *

The development team wants new commercial software to integrate into the current system. What steps can the security office take to ensure the software has no vulnerabilities?

• A.Ask the development team to reevaluate the current program and have a toolset developed securely within the organization.
• B.Request a copy of the most recent System and Organization Controls (SOC) report and/or most recent security audit reports and any vulnerability scans of the software code from the vendor.
• C.Request a software demo with permission to have a third-party penetration test completed on it.
• D.Purchase the software, deploy it in a test environment, and perform Dynamic Application Security Testing (DAST) on the software.

Comment: *

Name: *

Email: *

Verification: *

Under which of the following conditions is excess capacity most likely a good substitute for safety stock?

• A.The cost of excess capacity is less than the cost of an additional unit of safety stock in the same period.
• B.The cost to maintain one unit in inventory for a year is less than the direct labor cost.
• C.The service level with safety stock is more than the service level with excess capacity.
• D.Lead time for the product is longer than customers are willing to wait.

Comment: *

Name: *

Email: *

Verification: *

Which of the below represent the GREATEST cloud-specific policy and organizational risk?

• A.Supply chain failure
• B.Loss of governance between the client and cloud provider
• C.Cloud service termination or failure
• D.Loss of business reputation due to co-tenant activities

Comment: *

Name: *

Email: *

Verification: *

Global outsourcing and shared suppliers serving an industry are drivers of which category of risk?

• A.Supply disruptions
• B.Forecast inaccuracy
• C.Procurement problems
• D.Loss of intellectual property

Comment: *

Name: *

Email: *

Verification: *