Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is implementing SSO and wants to reduce the risk of session hijacking. They are considering using short session timeouts, but users complain about frequent re-authentication. The security team wants to balance security and usability. Which approach best achieves this balance?

   • AUse very long session timeouts to minimize user disruption.
   • BUse only IP-based restrictions for all sessions.
   • CDisable SSO and require separate logins for each application.
   • DImplement adaptive authentication that requires MFA only for high-risk sessions.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An organization plans to implement single sign-on (SSO) across its cloud applications. The security team is concerned about the risk of a single compromised credential granting access to all applications. Which additional control would best mitigate this risk while preserving the SSO user experience?

   • AImplement session timeouts on each application.
   • BUse longer passwords for all applications.
   • CRequire multi-factor authentication at the SSO identity provider.
   • DDisable SSO and require separate passwords for each application.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A multinational company is implementing SSO across its subsidiaries. The security team wants to enforce MFA for all SSO logins, but the HR department wants to minimize user disruption. Which approach balances security and user experience?

   • ADisable MFA for all users to avoid disruption
   • BUse only passwords for SSO
   • CEnforce MFA only for privileged roles and high-risk applications
   • DEnforce MFA for every login attempt without exception
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to strengthen remote access authentication. Currently, employees log in with a username and password. Management wants to add a second factor that is something the user has. Which of the following would satisfy this requirement?

   • AA second password chosen by the user
   • BA biometric fingerprint scan
   • CA one-time passcode generated by a hardware token
   • DA security question like 'What is your pet's name?'
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A financial firm is implementing MFA for its trading platform. The compliance team requires that the second factor be phishing-resistant and not rely on SMS. The IT team wants to minimize hardware deployment costs. Which solution best meets both requirements?

   • AEmail-based verification codes
   • BFIDO2 security keys
   • CSMS one-time passcodes
   • DPush notifications with a simple approve button
   Reveal Solution Discussion Select an answer first