問題文
A university federates sign-in for 60 cloud applications through one identity provider. The security team asks what new risk this concentration introduces and how to address it. Which pairing is correct?
選択肢
- The provider becomes a performance bottleneck, so it should be replicated across regions and sized for the combined peak sign-in rate of all 60 applications.
- Users reuse one password, so password complexity rules should be raised.
- Compromise of the provider reaches all 60 applications, so the provider itself needs the strongest authentication and the closest monitoring.
- Each application keeps its own password store as a fallback, so a compromise of the provider affects only the sign-in path while the local credentials remain a safe route that administrators can use to regain control of each application.