Federated Access and SSO GCAD Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is planning to allow employees to use their corporate credentials to access a partner's cloud application. The partner's application is in a different security domain and does not share the company's user directory. The company wants to avoid creating separate accounts for each employee in the partner's application. What should the architect implement?

   • AUse OAuth 2.0 to let the partner's application validate the corporate access token.
   • BSet up a VPN between the companies and use LDAP directly against the corporate directory.
   • CCreate user accounts in the partner's application and sync passwords from the corporate directory.
   • DEstablish a federated trust between the company's IdP and the partner's SP using SAML 2.0.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of attribute statements in a SAML assertion?

   • ATo provide additional information about the user, such as role or email, that can be used for authorization.
   • BTo specify the authentication method used.
   • CTo encrypt the assertion.
   • DTo define the trust relationship between IdP and SP.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is implementing SAML 2.0 SSO for a new web application. The application needs to receive the user's role from the IdP to make authorization decisions. The IdP administrator has configured the SAML assertion to include a role attribute. However, the application is not receiving the role attribute. The IdP logs show the assertion is being sent successfully. What is the most likely cause?

   • AThe application's SAML metadata does not include the role attribute in its required attributes list.
   • BThe IdP is using the HTTP POST binding, which does not support attribute statements.
   • CThe user's browser is blocking cookies, preventing the attribute from being stored.
   • DThe IdP is signing the assertion with a certificate that the application does not trust.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Why do standards like SAML and OIDC ensure interoperability across different vendors?

   • AThey require all vendors to use the same hardware.
   • BThey define common message formats and flows that any vendor can implement.
   • CThey are proprietary protocols owned by a single vendor.
   • DThey are only used by cloud providers.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary use case for WS-Federation?

   • AMachine-to-machine API authentication.
   • BBrowser-based SSO for consumer-facing web applications.
   • CMobile application authorization using OAuth-like tokens.
   • DEnterprise federated identity scenarios, often involving Active Directory Federation Services (AD FS).
   Reveal Solution Discussion Select an answer first