CompTIA CASP+ Practice Test

What is the best security solution option for Company ABC to improve operational efficiencies across multiple identity stores?

1. Implement two-factor authentication for all web applications.

2. Implement a web access controlled reverse proxy and centralized directory model.

3. Develop isolated identity stores for each web application.

4. Use a mixed model of authentication based on application requirements.

The correct answer is: Implement a web access controlled reverse proxy and centralized directory model.

Implementing a web access controlled reverse proxy and a centralized directory model offers a comprehensive solution for Company ABC to manage identities across multiple identity stores efficiently. This approach centralizes authentication processes into one directory, allowing for easier management of user identities and access controls. By utilizing a reverse proxy, the company can funnel all web application traffic through a single entry point, providing an additional layer of security while also streamlining the user experience. This centralization reduces redundancy and complexity, as administrators can manage user permissions and access rights in one location rather than across various isolated identity stores. Consequently, operational efficiencies are improved, resulting in a more cohesive approach to identity management. Other options, while they may provide some level of security or operational benefits, do not address the need for centralization and management of identities across multiple stores. Two-factor authentication, for example, enhances security but does not resolve the potential chaos and inefficiency of managing disparate identity systems. Developing isolated identity stores increases complexity and redundancy since it requires separate management for each application. A mixed model of authentication could offer flexibility but lacks the streamlined efficiency that comes with a centralized system. Thus, the choice of implementing a web access controlled reverse proxy and a centralized directory model is clearly the most effective solution for improving operational efficiencies