A company's security team wants to reduce the burden of MFA on employees while maintaining strong security. They decide that employees logging in from the corporate office on managed devices will only need a password, but remote logins from personal devices will require both a password and a one-time code from an authenticator app. Which authentication approach is the team implementing?

Adaptive authentication based on location and device posture

Risk-based authentication based on user behavior analytics

Step-up authentication triggered by a specific user role

Multi-factor authentication with a hardware token

What is a potential security risk of implementing Single Sign-On (SSO)?

It prevents users from accessing any systems offline

It creates a single point of failure if the SSO system is compromised

It increases the number of passwords users must remember

It requires users to use biometric authentication

What is the primary benefit of Single Sign-On (SSO) for users?

Users can access systems without any authentication

Users are automatically logged out of all systems after a set time

Users can share their passwords with colleagues

Users only need to remember one set of credentials for multiple systems

Certified Information Systems Security Professional

Domain 5Objective 6

5.6 - Implement Authentication Systems CISSP Practice Questions (Page 4)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

11concepts

13%of the exam

Questions 16–20

16application · medium
A company's security team wants to reduce the burden of MFA on employees while maintaining strong security. They decide that employees logging in from the corporate office on managed devices will only need a password, but remote logins from personal devices will require both a password and a one-time code from an authenticator app. Which authentication approach is the team implementing?
Select an answer first
17foundation · easy
What is a potential security risk of implementing Single Sign-On (SSO)?
Select an answer first
18foundation · easy
Which authentication protocol is commonly used in Windows Active Directory environments for network authentication?
Select an answer first
19foundation · easy
What is the primary benefit of Single Sign-On (SSO) for users?
Select an answer first
20foundation · easy
Which protocol is commonly used for centralized authentication of remote users connecting via VPN or wireless networks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

5.6 - Implement Authentication Systems CISSP Practice Questions (Page 4)

Questions 16–20

What is a potential security risk of implementing Single Sign-On (SSO)?

Which authentication protocol is commonly used in Windows Active Directory environments for network authentication?

What is the primary benefit of Single Sign-On (SSO) for users?

Which protocol is commonly used for centralized authentication of remote users connecting via VPN or wireless networks?

Keep studying — Identity and Access Management (IAM)