Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   An enterprise is implementing SSO across hundreds of applications. The security team is evaluating SAML 2.0 and OIDC. The applications include both legacy on-premises web apps and modern cloud-native apps. The team wants a single protocol that works for both, but they are concerned about the complexity of managing multiple protocols. What is the best recommendation?

   • AUse OIDC for all applications because it is simpler.
   • BDeploy an identity provider that supports both SAML and OIDC and configure each application with the appropriate protocol.
   • CUse SAML 2.0 for all applications because it is more mature.
   • DUse LDAP for all applications instead of SSO.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An organization wants to implement multi-factor authentication for its VPN. They currently use a username and password. Which additional factor would be considered 'something you have'?

   • AA personal identification number (PIN)
   • BA security question
   • CA smart card inserted into the computer
   • DA fingerprint scan
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to implement a passwordless authentication method that relies on a cryptographic key pair stored on the user's device. Which authentication mechanism should they choose?

   • AA traditional username and password
   • BCertificate-based authentication
   • CA one-time passcode sent via SMS
   • DA security question
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company wants to strengthen authentication for remote employees accessing the HR portal. Currently, employees log in with a username and password. The security team wants to add a second factor that is resistant to phishing and does not require employees to carry a separate hardware device. Which solution best meets these requirements?

   • ARequire employees to answer personal security questions after entering their password.
   • BSend a one-time passcode via SMS to the employee's mobile phone.
   • CDeploy a FIDO2-compliant passkey stored on the employee's laptop or phone.
   • DIssue each employee a TOTP token app on their personal smartphone.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Why is multi-factor authentication (MFA) considered more secure than single-factor authentication?

   • AIt requires an attacker to compromise multiple independent factors
   • BIt requires the user to remember more complex passwords
   • CIt eliminates the need for passwords
   • DIt speeds up the login process
   Reveal Solution Discussion Select an answer first