A company uses a cloud-based IdP and wants to allow its employees to access a third-party application. The application supports both SAML and OIDC. Which protocol should the company choose to simplify integration with its cloud IdP?

Either protocol, as they are functionally identical.

SAML, because it is the only protocol supported by cloud IdPs.

OIDC, because it is designed for modern web applications and is natively supported by most cloud IdPs.

A proprietary protocol developed by the application vendor.

In cloud federation, where does the identity provider typically reside?

On-premise, because cloud services cannot act as identity providers

In a hybrid location, with the identity database split between cloud and on-premise

At the user's device, using a local authentication agent

In the cloud, as a service that manages identities and provides authentication

A company uses a cloud-based identity provider (IdP) for its employees. The company acquires a smaller firm that uses a different cloud IdP. The goal is to allow employees from both companies to access each other's SaaS applications without creating separate accounts. What is the most efficient approach?

Create guest accounts in each company's IdP for all users from the other company.

Use a single sign-on portal that stores both companies' credentials in one database.

Establish a federation trust between the two IdPs so each company's users authenticate with their home IdP and gain access to the other's applications.

Migrate all users to a single on-premises Active Directory and sync it to both cloud IdPs.

An organization has an on-premises identity provider and wants to enable SSO for a third-party application that does not support SAML but supports OAuth 2.0. What is the best approach?

Ask the application vendor to enable SAML support.

Use a VPN to allow users to access the application directly.

Use a federation gateway that translates SAML from the on-prem IdP to OAuth tokens for the application.

Create separate accounts in the application and use a password manager.

A company wants to allow its employees to use their corporate credentials to access a partner's cloud application. The partner's application supports OIDC. The company uses a cloud-based IdP. What is the most straightforward way to enable this?

Configure the partner's application as a trusted application in the company's cloud IdP and enable OIDC SSO.

Create a user account for each employee in the partner's application.

Use a federation server on-premises to bridge to the partner's application.

Share the company's IdP credentials with the partner.

Certified Information Systems Security Professional

Domain 5Objective 3

5.3 - Federated Identity with a Third-Party Service CISSP Practice Questions (Page 5)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

4concepts

13%of the exam

Questions 21–25

21application · medium
A company uses a cloud-based IdP and wants to allow its employees to access a third-party application. The application supports both SAML and OIDC. Which protocol should the company choose to simplify integration with its cloud IdP?
Select an answer first
22foundation · easy
In cloud federation, where does the identity provider typically reside?
Select an answer first
23application · medium
A company uses a cloud-based identity provider (IdP) for its employees. The company acquires a smaller firm that uses a different cloud IdP. The goal is to allow employees from both companies to access each other's SaaS applications without creating separate accounts. What is the most efficient approach?
Select an answer first
24application · medium
An organization has an on-premises identity provider and wants to enable SSO for a third-party application that does not support SAML but supports OAuth 2.0. What is the best approach?
Select an answer first
25application · medium
A company wants to allow its employees to use their corporate credentials to access a partner's cloud application. The partner's application supports OIDC. The company uses a cloud-based IdP. What is the most straightforward way to enable this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.