5.3 - Federated Identity with a Third-Party Service CISSP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a key characteristic of hybrid federation?

   • AIt requires separate identities for on-premise and cloud resources
   • BIt uses only cloud identity providers for all on-premise resources
   • CIt combines on-premise and cloud identity providers to provide a unified authentication experience
   • DIt uses only on-premise identity providers for all cloud resources
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company uses a cloud-based IdP and wants to allow its employees to access a third-party application that supports OIDC. The company wants to ensure that only users with a specific job title can access the application. How can this be achieved?

   • AConfigure the application's access policy in the cloud IdP to include a condition based on the user's job title attribute.
   • BUse a network firewall to block access based on user identity.
   • CAsk the application vendor to filter users by job title.
   • DCreate a separate group for users with that job title and assign them to the application.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company uses a cloud-based identity provider (IdP) for all its applications. They want to allow employees to use their corporate credentials to access a third-party expense reporting tool that supports SAML. What is the most efficient way to set this up?

   • ASet up a federation server on-premises to act as a bridge.
   • BCreate a separate account for each employee in the expense tool and use a password manager.
   • CAdd the expense tool as an application in the cloud IdP and configure SAML SSO.
   • DUse the expense tool's built-in user database and sync it with the cloud IdP.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of federated identity management?

   • ATo create a single directory that contains all users from all partner organizations
   • BTo store all user credentials in a central database managed by a third-party service
   • CTo enable users to use a single set of credentials across multiple organizations that trust each other
   • DTo eliminate the need for passwords by using biometric authentication exclusively
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization has an on-premises identity provider and wants to federate with a third-party service. The organization's security policy requires that all authentication attempts be logged in the on-premises IdP. What is the best way to ensure this?

   • AEnsure that the on-premises IdP is the authentication authority and logs all authentication events.
   • BUse a separate logging tool that captures all network traffic.
   • CDisable logging in the third-party service.
   • DAsk the third-party service to send logs to the organization.
   Reveal Solution Discussion Select an answer first