Which authentication approach is most appropriate for a low-risk action such as viewing a public profile on a social media site?

Certificate-based authentication

A company is consolidating its identity infrastructure. They currently have multiple LDAP directories and want to provide a unified authentication interface for applications. They also need to support RADIUS for network access. Which approach best achieves this consolidation?

Migrate all data to a single LDAP directory and decommission the others

Deploy a virtual directory that aggregates the LDAP directories and provides a single LDAP endpoint, and connect RADIUS to that endpoint

Use SAML as the unified authentication protocol for all applications and RADIUS

Implement Kerberos as the unified authentication protocol and use LDAP only for authorization

A company has a legacy network access server (NAS) that supports only RADIUS for authenticating VPN users. The architect wants to centralize authentication against the existing LDAP directory and also capture accounting data for each VPN session. Which solution should be implemented?

Configure the NAS to authenticate directly against the LDAP directory using LDAP binds

Implement Kerberos for VPN authentication and use Windows event logs for accounting

Replace the NAS with a device that supports SAML for VPN authentication

Deploy a RADIUS server that proxies authentication requests to the LDAP directory and logs accounting records

An organization wants to implement a tiered authentication strategy: standard users use password plus a one-time code for most access, but administrators must use a hardware token and a PIN for privileged access. Which authentication approach is being applied?

Multi-factor authentication with different assurance levels

Single-factor authentication with varying password complexity

Federated authentication with external identity providers

A mobile app needs to access a user's calendar data from a third-party service, but the user should not share their password with the app. The app should only get permission to read calendar events, not modify them. Which framework should the architect use to grant the app delegated access?

SAML with an attribute statement for calendar permissions

Kerberos with a service ticket for the calendar service

OAuth 2.0 with a limited scope for read-only calendar access

LDAP with a bind to the calendar service

Information Systems Security Architecture Professional

Domain 4Objective 2

4.2 Architect Identity Authentication ISSAP Practice Questions (Page 6)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

13concepts

25%of the exam

Questions 26–30

26foundation · easy
Which authentication approach is most appropriate for a low-risk action such as viewing a public profile on a social media site?
Select an answer first
27expert · hard
A company is consolidating its identity infrastructure. They currently have multiple LDAP directories and want to provide a unified authentication interface for applications. They also need to support RADIUS for network access. Which approach best achieves this consolidation?
Select an answer first
28application · medium
A company has a legacy network access server (NAS) that supports only RADIUS for authenticating VPN users. The architect wants to centralize authentication against the existing LDAP directory and also capture accounting data for each VPN session. Which solution should be implemented?
Select an answer first
29application · medium
An organization wants to implement a tiered authentication strategy: standard users use password plus a one-time code for most access, but administrators must use a hardware token and a PIN for privileged access. Which authentication approach is being applied?
Select an answer first
30application · medium
A mobile app needs to access a user's calendar data from a third-party service, but the user should not share their password with the app. The app should only get permission to read calendar events, not modify them. Which framework should the architect use to grant the app delegated access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.