A university is implementing SSO for its students to access the learning management system (LMS), email, and library resources. The IT team wants to minimize the number of passwords students must remember. Which approach should the administrator take?

Use OpenID Connect (OIDC) for the LMS and SAML for email, but keep library resources on a separate login.

Create separate accounts for each service and synchronize passwords using a directory sync tool.

Implement a password manager and distribute it to all students.

Configure SAML federation between the university's identity provider and each service provider.

A hospital is implementing MFA for its clinical staff. The staff frequently move between departments and use shared workstations. The security team requires MFA that is fast, does not require personal devices, and works on shared workstations. Which MFA method should the administrator implement?

Biometric fingerprint scanners on each workstation

SMS one-time passcodes to personal phones

What is the primary benefit of implementing Single Sign-On (SSO) for users in an organization?

Allows users to access multiple applications with a single set of credentials

Provides a separate password for each application to increase security

Eliminates the need for any password or credential verification

Automatically grants administrative privileges to all users

An e-commerce company is deploying a new internal certificate authority (CA) to issue certificates for its web servers and internal applications. The security team requires that the CA's root certificate be protected from compromise, and that certificates issued to web servers be automatically renewed. Which deployment strategy should the administrator implement?

Create a root CA and a subordinate CA on the same server, and use group policy to distribute certificates.

Use a public CA for all internal certificates and rely on its automatic renewal features.

Keep the root CA offline and issue certificates from an online subordinate CA, with auto-enrollment configured for web servers.

Install the root CA on a highly available server and issue all certificates directly from it, with a scheduled task for renewal.

A multinational corporation is deploying a PAM solution for its database administrators (DBAs). The security team requires that DBAs must request access for each task, and the access must be automatically revoked after the task is completed. Which PAM feature should the administrator configure?

Session recording with real-time monitoring

SSH key management with periodic rotation

Credential vaulting with manual checkout

Just-in-time (JIT) access with time-based approval workflows

CompTIACloudNetX

Domain 2Objective 5

IAM Solutions CNX-001 Practice Questions (Page 4)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

28%of the exam

Questions 16–20

16application · medium
A university is implementing SSO for its students to access the learning management system (LMS), email, and library resources. The IT team wants to minimize the number of passwords students must remember. Which approach should the administrator take?
Select an answer first
17expert · hard
A hospital is implementing MFA for its clinical staff. The staff frequently move between departments and use shared workstations. The security team requires MFA that is fast, does not require personal devices, and works on shared workstations. Which MFA method should the administrator implement?
Select an answer first
18foundation · easy
What is the primary benefit of implementing Single Sign-On (SSO) for users in an organization?
Select an answer first
19application · medium
An e-commerce company is deploying a new internal certificate authority (CA) to issue certificates for its web servers and internal applications. The security team requires that the CA's root certificate be protected from compromise, and that certificates issued to web servers be automatically renewed. Which deployment strategy should the administrator implement?
Select an answer first
20application · medium
A multinational corporation is deploying a PAM solution for its database administrators (DBAs). The security team requires that DBAs must request access for each task, and the access must be automatically revoked after the task is completed. Which PAM feature should the administrator configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.