Which two controls help an enterprise reduce risk from credentials used on unmanaged endpoints? (Choose two.)
Select all correct answers, then click Submit.
Short Explanation and Infographic
Pair SSO plus device-aware CAP with tight PAT/SSO token policies. Don't open anonymous git:// or paste deploy keys into public gists.
Full explanation below image
Full Explanation
Unmanaged endpoints increase credential theft and data exfiltration risk. Enterprises mitigate this by forcing authentication through SAML SSO and IdP conditional access that can demand compliant or managed devices, and by restricting how PATs and other tokens are created, scoped, and SSO-authorized. Disabling HTTPS in favor of anonymous git:// is insecure and operationally unacceptable for enterprise source control. Publishing deploy keys in public gists exposes repository credentials. Administrators should also educate users on SSH key hygiene, hardware-backed keys where possible, and revoke tokens promptly during offboarding. Combining identity, device, and token governance yields defense in depth.