What is the primary purpose of XACML?

To provide a protocol for user authentication

To define a standard for expressing access control policies

To manage user identities in a directory

A company is implementing SAML-based federation with a partner. The partner will act as the identity provider, and the company's application will be the service provider. What must be established for the service provider to trust authentication assertions from the identity provider?

A shared secret password for each user

A metadata exchange that includes certificates and endpoints

A direct LDAP connection to the identity provider's directory

A Kerberos realm trust between the two organizations

What is the primary use of LDAP in an enterprise environment?

To access and manage directory information

To provide single sign-on across web applications

Information Systems Security Architecture Professional

Domain 4Objective 2

4.2 Architect Identity Authentication ISSAP Practice Questions (Page 3)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

13concepts

25%of the exam

Questions 11–15

11foundation · easy
What is the primary purpose of XACML?
Select an answer first
12foundation · easy
In OAuth, which role represents the application that wants to access a user's resources?
Select an answer first
13application · medium
A company is implementing SAML-based federation with a partner. The partner will act as the identity provider, and the company's application will be the service provider. What must be established for the service provider to trust authentication assertions from the identity provider?
Select an answer first
14foundation · easy
In a SAML flow, which component issues the authentication assertion?
Select an answer first
15foundation · easy
What is the primary use of LDAP in an enterprise environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

4.2 Architect Identity Authentication ISSAP Practice Questions (Page 3)

Questions 11–15

What is the primary purpose of XACML?

In OAuth, which role represents the application that wants to access a user's resources?

A company is implementing SAML-based federation with a partner. The partner will act as the identity provider, and the company's application will be the service provider. What must be established for the service provider to trust authentication assertions from the identity provider?

In a SAML flow, which component issues the authentication assertion?

What is the primary use of LDAP in an enterprise environment?

Keep studying — Identity and Access Management (IAM) Architecture