hard20 pts · first answer countsidentity-securityentra-idtoken-security

Disabling a user who still has a token

You disable a compromised account. Without continuous access evaluation, the attacker's access token for Exchange Online keeps working for a while. With CAE, what changes?

A.All access tokens are shortened to five minutes for every userB.Exchange is told about the event and rejects the token in near real timeC.The attacker's device is wiped automaticallyD.Refresh tokens stop working but access tokens last 24 hours more

Discussion 0

Join free to post in the discussion.

Disabling a user who still has a token

Discussion 0

Related questions