A multinational company wants to implement SSO across its subsidiaries, each of which uses a different identity provider. The goal is to allow employees to access all internal applications with a single login, while each subsidiary retains control over its own user directory. Which architecture best achieves this?

Federated identity management with a trusted broker

Use separate SSO systems for each subsidiary

Synchronize all user accounts into one directory

A single global identity provider that replaces all subsidiary directories

A company's security policy requires that remote employees authenticate with both a password and a one-time code from an authenticator app. An employee reports that the authenticator app is not generating codes. Which fallback option would still satisfy the MFA requirement?

Use a hardware token that generates one-time codes

Allow the user to log in with just the password

Use a second password that the user sets

Which of the following is a core component of an Identity and Access Management (IAM) system?

User provisioning and deprovisioning

Intrusion detection system (IDS)

EC-CouncilCertified Security Specialist

Domain 1Objective 2

Identification, Authentication, and Authorization ECSS Practice Questions (Page 2)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

46questions here

10free pages

9concepts

9 Concepts in This Objective

Identification vs. Authentication vs. Authorization
Identification Methods
Authentication Factors
Authentication Mechanisms
Authorization Models
Access Control Lists (ACLs)
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Identity and Access Management (IAM)

Questions 6–10

6expert · hard
A multinational company wants to implement SSO across its subsidiaries, each of which uses a different identity provider. The goal is to allow employees to access all internal applications with a single login, while each subsidiary retains control over its own user directory. Which architecture best achieves this?
Select an answer first
7application · medium
A company's security policy requires that remote employees authenticate with both a password and a one-time code from an authenticator app. An employee reports that the authenticator app is not generating codes. Which fallback option would still satisfy the MFA requirement?
Select an answer first
8foundation · easy
A system assigns each user a unique numeric value that is used to identify the user in system logs and access control records. What is this value called?
Select an answer first
9foundation · easy
Which authentication mechanism uses a physical device that generates a time-based code that changes periodically?
Select an answer first
10foundation · easy
Which of the following is a core component of an Identity and Access Management (IAM) system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Identification, Authentication, and Authorization ECSS Practice Questions (Page 2)

Questions 6–10

A company's security policy requires that remote employees authenticate with both a password and a one-time code from an authenticator app. An employee reports that the authenticator app is not generating codes. Which fallback option would still satisfy the MFA requirement?

A system assigns each user a unique numeric value that is used to identify the user in system logs and access control records. What is this value called?

Which authentication mechanism uses a physical device that generates a time-based code that changes periodically?

Which of the following is a core component of an Identity and Access Management (IAM) system?

Keep studying — Network Defense Fundamentals and Controls