Free practice · multiple-choice · hard

Practice

Review an overprivileged connected app

A meeting-notes app can read, edit, delete, and share every file in an employee's cloud drive. Which review actions are appropriate?

Cloud access lifecycle

Every shared link and connected app needs an owner and an end state

  1. PurposeName the approved collaboration need
  2. RecipientChoose specific people or groups
  3. PermissionGrant view or edit only as needed
  4. ExpirationSet an end date or review point
  5. ReviewInspect guests, apps, links, and owners
  6. RecoverUse approved version and backup paths

Specific recipients, least privilege, expiration, guest review, connected-app control, and recovery planning prevent access from becoming permanent by accident.

Choose all that apply