In the AAA framework, what does the first 'A' (Authentication) refer to?

Verifying the identity of the user

Recording user activity for auditing

Determining what resources the user can access

A company wants its employees to use their existing corporate credentials to access a third-party SaaS application. The SaaS provider supports SAML 2.0. The company wants to avoid storing passwords in the SaaS application. What should the company implement?

Certificate-based authentication using client certificates

Single sign-on using Kerberos tickets

Federated identity management with the company as the identity provider

RADIUS-based authentication for the SaaS application

What is a common weakness of password-based authentication?

Passwords are difficult for users to remember

Passwords are stored in plaintext by default

Passwords are often weak or reused across multiple accounts

Certified Information Systems Security Professional

Domain 5Objective 6

5.6 - Implement Authentication Systems CISSP Practice Questions (Page 2)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

11concepts

13%of the exam

Questions 6–10

6foundation · easy
Which combination of authentication factors represents a multi-factor authentication (MFA) approach?
Select an answer first
7foundation · easy
Which of the following is an example of the 'something you have' authentication factor?
Select an answer first
8foundation · easy
In the AAA framework, what does the first 'A' (Authentication) refer to?
Select an answer first
9application · medium
A company wants its employees to use their existing corporate credentials to access a third-party SaaS application. The SaaS provider supports SAML 2.0. The company wants to avoid storing passwords in the SaaS application. What should the company implement?
Select an answer first
10foundation · easy
What is a common weakness of password-based authentication?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

5.6 - Implement Authentication Systems CISSP Practice Questions (Page 2)

Questions 6–10

Which combination of authentication factors represents a multi-factor authentication (MFA) approach?

Which of the following is an example of the 'something you have' authentication factor?

In the AAA framework, what does the first 'A' (Authentication) refer to?

A company wants its employees to use their existing corporate credentials to access a third-party SaaS application. The SaaS provider supports SAML 2.0. The company wants to avoid storing passwords in the SaaS application. What should the company implement?

What is a common weakness of password-based authentication?

Keep studying — Identity and Access Management (IAM)