Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 10)

Questions 46–47

1. 46application · medium

   An organization uses SSO with SAML 2.0 to connect its on-premises Active Directory to a cloud HR application. A user reports that they can log into the HR app but cannot access a new module that their manager says they should be able to use. The user's AD account is in the correct group. What is the most likely cause?

   • AThe user's password has expired in Active Directory.
   • BThe user's browser is not compatible with SAML.
   • CThe HR application's authorization policy has not been updated to include the new group.
   • DThe SAML certificate has expired.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   A user logs in with a username and password. After login, the system checks whether the user has permission to access a file. Which statement is true?

   • ABoth steps are authorization
   • BBoth steps are authentication
   • CThe login is authentication, and the file access check is authorization
   • DThe login is authorization, and the file access check is authentication
   Reveal Solution Discussion Select an answer first