Federated Access and SSO GCAD Practice Questions (Page 12)

Questions 56–60

1. 56foundation · easy

   What is a trust misconfiguration in a federated environment?

   • AAn SP trusting an IdP that it should not trust, allowing unauthorized access.
   • BHaving multiple service providers.
   • CUsing a strong encryption algorithm.
   • DUsing the same certificate for both IdP and SP.
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   A company is evaluating identity federation standards to integrate with a new cloud-based HR system. The HR system supports both SAML 2.0 and OpenID Connect. The company's existing infrastructure uses SAML 2.0 for all other SaaS integrations. The HR system's documentation states that it supports both protocols equally. Which factor should the company consider when choosing between SAML 2.0 and OIDC for this integration?

   • AOIDC is always more secure than SAML 2.0, so it should be chosen regardless of other factors.
   • BOIDC is only for mobile applications, so SAML 2.0 is the only viable option.
   • CThe company's existing expertise and operational experience with SAML 2.0 may make it easier to support and troubleshoot.
   • DSAML 2.0 is not suitable for cloud applications, so OIDC should be chosen.
   Reveal Solution Discussion Select an answer first
4. 58foundation · easy

   Which problem does single sign-on (SSO) directly address?

   • ACompliance with data residency regulations.
   • BNetwork latency in accessing cloud applications.
   • CData encryption at rest in storage systems.
   • DCredential fatigue caused by managing multiple usernames and passwords.
   Reveal Solution Discussion Select an answer first
5. 59application · medium

   A company has implemented SAML SSO for a web application. Users authenticate at the IdP and are redirected to the SP with a SAML assertion. The SP creates a local session. The security team wants to ensure that when a user logs out of the SP, the IdP session is also terminated. What should the architect configure?

   • AClear the user's browser cookies when they log out of the SP.
   • BSet the IdP session timeout to match the SP session timeout.
   • CUse the HTTP POST binding for the initial SSO flow.
   • DConfigure the SP to send a SAML logout request to the IdP's single logout endpoint.
   Reveal Solution Discussion Select an answer first
6. 60foundation · easy

   What is the primary difference between a SAML assertion and a JWT?

   • ASAML assertions are XML-based, while JWTs are JSON-based.
   • BJWTs are always encrypted, while SAML assertions are not.
   • CSAML assertions are only used in on-premises systems.
   • DSAML assertions are used for authorization, while JWTs are used for authentication.
   Reveal Solution Discussion Select an answer first