1.3 Managing Authentication PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–13

1. 11foundation · easy

   In a SAML-based single sign-on setup, which component is responsible for authenticating the user and asserting their identity to the service provider?

   • ACertificate authority (CA)
   • BOAuth authorization server
   • CService provider (SP)
   • DIdentity provider (IdP)
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When configuring SAML-based single sign-on, what is the primary purpose of exchanging metadata between the identity provider and the service provider?

   • ATo synchronize user passwords between the two systems
   • BTo establish a trust relationship by sharing endpoints and certificates
   • CTo configure OAuth scopes for the application
   • DTo enforce password complexity rules
   Reveal Solution Discussion Select an answer first
3. 13foundation · easy

   In OAuth 2.0, what is the purpose of a scope?

   • ATo specify the expiration time of the access token
   • BTo define the specific permissions an application is requesting from the user
   • CTo identify the user's identity provider
   • DTo encrypt the access token
   Reveal Solution Discussion Select an answer first