Identity Federation and Single Sign-On (SSO) CSE Practice Questions (Page 9)

Questions 41–44

1. 41foundation · easy

   Which federation standard is specifically designed to provide a simple identity layer on top of the OAuth 2.0 protocol?

   • ASAML 2.0
   • BLDAP
   • CWS-Federation
   • DOpenID Connect
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the primary purpose of a trust relationship in identity federation?

   • ATo let the service provider accept identity assertions from the identity provider as valid proof of authentication.
   • BTo allow the service provider to authenticate users directly using its own user database.
   • CTo enable the identity provider to access the service provider's resources on behalf of the user.
   • DTo establish a security token service (STS) that issues tokens to all parties in the federation.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the primary benefit of single sign-on (SSO) for users?

   • AUsers can access all applications without any authentication.
   • BUsers can access multiple applications with a single set of credentials after authenticating once.
   • CUsers no longer need to remember any passwords for any application.
   • DUsers can share their credentials with other users to access applications.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company is federating with a partner organization. The partner will act as an IdP for their employees, and the company's cloud application will be the SP. The company wants to ensure that only partner employees in the 'Engineering' group can access the application. Which configuration is the most appropriate?

   • AConfigure the SP to trust the partner's IdP and use group attributes in the SAML assertion to enforce access.
   • BCreate local accounts for each partner employee and assign them to an Engineering group.
   • CAsk the partner to create a separate IdP for Engineering employees.
   • DUse OAuth 2.0 client credentials flow with the partner's IdP.
   Reveal Solution Discussion Select an answer first