A company uses a third-party identity provider (IdP) to authenticate users to a cloud application. The IdP supports SAML 2.0. The application is currently configured to accept only username/password authentication. What must be configured to enable SAML-based SSO?

Change the application's authentication method to OAuth 2.0.

Configure the application to trust the IdP's signing certificate and set up a SAML service provider (SP) connection.

Enable LDAP authentication in the application.

Create a user account in the IdP for each application user.

In cloud architecture, what is the primary role of a cloud identity?

It stores user passwords in a central database for all cloud applications.

It encrypts all data stored in the cloud to prevent unauthorized access.

It provides a network path between on-premises systems and cloud resources.

It uniquely identifies a user, service, or resource and provides the basis for authentication and authorization decisions.

A company uses Microsoft Entra ID (Azure AD) as its cloud identity provider and maintains an on-premises Active Directory. Employees currently have separate passwords for cloud and on-premises resources. The company wants users to authenticate once and access both environments without maintaining two credentials. Which configuration should the administrator implement?

Set up federation between the on-premises AD and Entra ID using AD FS, and configure single sign-on for cloud apps.

Deploy a third-party IdP and configure it as the sole authentication source for all cloud apps.

Enable Seamless SSO in Entra ID without any federation trust.

Create a separate cloud identity for each user in Entra ID and sync passwords using Microsoft Entra Connect.

In a cloud environment, which entity typically acts as the identity provider when a user signs in to a third-party SaaS application using their corporate credentials?

The cloud provider's network infrastructure

The corporate identity provider (e.g., Azure AD, Okta)

What is the primary benefit of federated identity for an organization?

It automatically encrypts all network traffic between the user and the cloud.

It provides a dedicated physical server for each user's identity data.

It enables single sign-on (SSO) across multiple systems by establishing trust between identity providers.

It eliminates the need for any password policies within the organization.

GIAC Cloud Security Architecture and Design

Domain 1Objective 1

Cloud Identity GCAD Practice Questions (Page 5)

Part of the Identity and Access Management domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–23 in this domain), expect 3–5 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

5concepts

Questions 21–25

21application · medium
A company uses a third-party identity provider (IdP) to authenticate users to a cloud application. The IdP supports SAML 2.0. The application is currently configured to accept only username/password authentication. What must be configured to enable SAML-based SSO?
Select an answer first
22foundation · easy
In cloud architecture, what is the primary role of a cloud identity?
Select an answer first
23application · medium
A company uses Microsoft Entra ID (Azure AD) as its cloud identity provider and maintains an on-premises Active Directory. Employees currently have separate passwords for cloud and on-premises resources. The company wants users to authenticate once and access both environments without maintaining two credentials. Which configuration should the administrator implement?
Select an answer first
24foundation · easy
In a cloud environment, which entity typically acts as the identity provider when a user signs in to a third-party SaaS application using their corporate credentials?
Select an answer first
25foundation · easy
What is the primary benefit of federated identity for an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.