An architect is designing a federation solution for a partner portal. The portal will be accessed via a web browser, and the partner will authenticate users using their own identity provider. The architect must also enable the portal to call the partner's API to retrieve user profile data. Which combination of protocols should be used?

OAuth 2.0 for both SSO and API access

LDAP for SSO and RADIUS for API access

SAML for browser-based SSO and OAuth 2.0 for API access

SAML for both SSO and API access

How is trust typically established between an identity provider and a service provider in a federation?

By exchanging certificates or metadata

What is the primary purpose of SAML in a federated identity environment?

To exchange authentication and authorization data between parties

To provide a directory service for user objects

To manage user passwords in a central repository

To encrypt network traffic between clients and servers

Which of the following is a characteristic of a stand-alone trust model?

All domains share a single identity store

Domains operate independently without trusting each other

Users can access all resources without authentication

Trust is automatically established between all domains

Information Systems Security Architecture Professional

Domain 4Objective 2

4.2 Architect Identity Authentication ISSAP Practice Questions (Page 4)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

13concepts

25%of the exam

Questions 16–20

16expert · hard
An architect is designing a federation solution for a partner portal. The portal will be accessed via a web browser, and the partner will authenticate users using their own identity provider. The architect must also enable the portal to call the partner's API to retrieve user profile data. Which combination of protocols should be used?
Select an answer first
17foundation · easy
How is trust typically established between an identity provider and a service provider in a federation?
Select an answer first
18foundation · easy
An organization requires users to authenticate with a password and a one-time code from a hardware token. Which authentication approach does this represent?
Select an answer first
19foundation · easy
What is the primary purpose of SAML in a federated identity environment?
Select an answer first
20foundation · easy
Which of the following is a characteristic of a stand-alone trust model?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

4.2 Architect Identity Authentication ISSAP Practice Questions (Page 4)

Questions 16–20

How is trust typically established between an identity provider and a service provider in a federation?

An organization requires users to authenticate with a password and a one-time code from a hardware token. Which authentication approach does this represent?

What is the primary purpose of SAML in a federated identity environment?

Which of the following is a characteristic of a stand-alone trust model?

Keep studying — Identity and Access Management (IAM) Architecture