Which scenario best describes a stand-alone trust model?

Two companies that use a shared identity provider

A company that uses SAML for SSO with a partner

A company that uses OAuth for delegated access

Two companies with separate identity systems that do not trust each other

Which characteristic is a strength of single-factor authentication?

Eliminates the need for password policies

Simplicity and low user friction

Strong assurance of user identity

High resistance to phishing attacks

A university wants to allow students to use their existing institutional credentials to access a third-party research portal. The portal does not store student passwords and must not have access to the university's directory. Which authentication approach should the architect recommend?

Use LDAP to allow the portal to bind directly to the university's directory

Configure the research portal as a service provider and the university as an identity provider using SAML federation

Implement OAuth 2.0 with the university as the authorization server and the portal as the resource server

Provision the same username and password in both systems and sync them periodically

Information Systems Security Architecture Professional

Domain 4Objective 2

4.2 Architect Identity Authentication ISSAP Practice Questions (Page 2)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

13concepts

25%of the exam

Questions 6–10

6foundation · easy
Which scenario best describes a stand-alone trust model?
Select an answer first
7foundation · easy
Which of the following is an example of a multi-factor authentication combination?
Select an answer first
8foundation · easy
Which characteristic is a strength of single-factor authentication?
Select an answer first
9foundation · easy
In a federated trust relationship, which entity authenticates the user?
Select an answer first
10application · medium
A university wants to allow students to use their existing institutional credentials to access a third-party research portal. The portal does not store student passwords and must not have access to the university's directory. Which authentication approach should the architect recommend?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

4.2 Architect Identity Authentication ISSAP Practice Questions (Page 2)

Questions 6–10

Which scenario best describes a stand-alone trust model?

Which of the following is an example of a multi-factor authentication combination?

Which characteristic is a strength of single-factor authentication?

In a federated trust relationship, which entity authenticates the user?

A university wants to allow students to use their existing institutional credentials to access a third-party research portal. The portal does not store student passwords and must not have access to the university's directory. Which authentication approach should the architect recommend?

Keep studying — Identity and Access Management (IAM) Architecture