5.2 - Design Identification and Authentication Strategy (e.g., People, Devices, and Services) CISSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does Just-In-Time (JIT) provisioning help reduce security risks?

   • ABy minimizing standing privileges that could be misused if an account is compromised
   • BBy eliminating the need for authentication
   • CBy encrypting all user credentials
   • DBy making all user accounts permanent and unchangeable
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A multinational company uses an on-premises Active Directory for employee authentication. They are adopting a cloud-based HR system and a SaaS CRM. They want employees to sign in once with their corporate credentials and access all three systems without being prompted again. The company also wants to enforce group-based access policies consistently across all systems. Which approach best achieves this?

   • AImplement federated identity management using SAML 2.0 between the on-premises identity provider and the cloud applications, and map Active Directory groups to roles in each application.
   • BCreate separate user accounts in each cloud application and synchronize passwords using a password vault.
   • CConfigure each cloud application to use the same shared secret password for all employees.
   • DUse OAuth 2.0 to issue access tokens directly to each application without involving an identity provider.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is designing a web application that handles sensitive financial data. They want to implement session management to prevent session fixation and session hijacking. Which combination of controls is most effective?

   • AStore the session ID in the URL and use a short timeout.
   • BGenerate a new session ID after login, set a short idle timeout, and use secure cookies with the HttpOnly and Secure flags.
   • CUse a fixed session ID for the user's entire browser session.
   • DUse a long session timeout and rely on the user to log out.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an example of a 'something you have' authentication factor?

   • AA password
   • BA smart card
   • CA PIN
   • DA fingerprint
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why does multi-factor authentication (MFA) provide stronger security than single-factor authentication?

   • AIt eliminates the need for passwords entirely
   • BIt encrypts all authentication traffic
   • CIt requires the user to present two or more different types of authentication factors
   • DIt uses longer passwords that are harder to guess
   Reveal Solution Discussion Select an answer first