How can an enterprise integrate a cloud provider like AWS with an on-premises identity provider?

By replicating the on-premises user database to AWS.

By using SAML 2.0 federation to allow users to sign in to AWS using their corporate credentials.

By creating a VPN tunnel and using the same password database.

By using OAuth 2.0 to authenticate users to AWS APIs.

A company is planning to implement SSO for its employees across multiple SaaS applications. The goal is to reduce password fatigue and improve user experience. Which of the following is the primary benefit of SSO in this context?

Users authenticate once and gain access to all federated applications without re-entering credentials.

SSO ensures that all applications use the same password, simplifying password management.

SSO provides a single audit log for all user activity across applications.

SSO eliminates the need for multi-factor authentication (MFA) because the IdP handles authentication.

A company uses SAML 2.0 SSO with multiple SaaS applications. A user reports that after logging out of one application, they are still logged into other applications. The security team wants to implement single logout (SLO) across all applications. Which of the following is a critical requirement for SLO to work effectively?

The IdP must store the user's password to re-authenticate during logout.

The user must close the browser to terminate all sessions.

All SPs must support the SAML SLO profile and be configured with the IdP's SLO endpoint.

The IdP must issue a new SAML assertion for each SP during logout.

Which part of a SAML assertion contains information about when and how the user was authenticated?

Authorization decision statement

GIAC Cloud Security Architecture and Design

Domain 1Objective 3

Federated Access and SSO GCAD Practice Questions (Page 3)

Part of the Identity and Access Management domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–23 in this domain), expect 3–5 from this objective — we provide 60 practice questions to prepare you well beyond it. (estimate)

60questions here

12free pages

15concepts

Questions 11–15

11foundation · easy
Which protocol is best suited for a web-based SSO scenario where an enterprise wants to federate with a partner organization using SAML?
Select an answer first
12foundation · easy
How can an enterprise integrate a cloud provider like AWS with an on-premises identity provider?
Select an answer first
13application · medium
A company is planning to implement SSO for its employees across multiple SaaS applications. The goal is to reduce password fatigue and improve user experience. Which of the following is the primary benefit of SSO in this context?
Select an answer first
14expert · medium
A company uses SAML 2.0 SSO with multiple SaaS applications. A user reports that after logging out of one application, they are still logged into other applications. The security team wants to implement single logout (SLO) across all applications. Which of the following is a critical requirement for SLO to work effectively?
Select an answer first
15foundation · easy
Which part of a SAML assertion contains information about when and how the user was authenticated?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.

Federated Access and SSO GCAD Practice Questions (Page 3)

Questions 11–15

Which protocol is best suited for a web-based SSO scenario where an enterprise wants to federate with a partner organization using SAML?

How can an enterprise integrate a cloud provider like AWS with an on-premises identity provider?

A company is planning to implement SSO for its employees across multiple SaaS applications. The goal is to reduce password fatigue and improve user experience. Which of the following is the primary benefit of SSO in this context?

Which part of a SAML assertion contains information about when and how the user was authenticated?

Keep studying — Identity and Access Management