A security administrator is adding a new sanctioned cloud application to SaaS Data Security. After authentication, how does the tool gain API access for monitoring?
A.
It transmits the configured SAML user profile to the cloud application for security event attribution.
B.
It establishes an encrypted key pair with the cloud application to safely transmit user data.
C.
It generates a certificate and sends it to the cloud application for TLS decryption and inspection.
D.
It receives a token from the cloud application for establishing and maintaining a secure connection.
Correct Answer: D
Explanation:
When adding a new sanctioned cloud application to SaaS Data Security , the tool establishes API access by receiving an OAuth token or a similar type of token from the cloud application. API Integration : The token allows the SaaS Data Security solution to authenticate itself with the cloud application, enabling secure monitoring and management of user activity, data flow, and security events. Token Usage : The token maintains the connection between the SaaS application and the security tool, ensuring seamless communication while enforcing access policies and monitoring for anomalies. Security : This method ensures that API access is secure and prevents unauthorized access to the cloud application. References : Palo Alto Networks SaaS Security API Documentation OAuth Authentication and API Access