Which of the following is a typical use case for RADIUS?

Authenticating users connecting to a corporate Wi-Fi network

Providing a directory of user attributes

Issuing digital certificates to users

Exchanging SAML assertions between web applications

A company is building an API that allows third-party applications to access user data. They want to support both user-authorized access (where the user logs in and grants permission) and machine-to-machine access (where the application authenticates itself). Which OAuth 2.0 grant types should be implemented?

Resource Owner Password Credentials for both

Client Credentials for both user-authorized and machine-to-machine access

Authorization Code grant for user-authorized access and Client Credentials grant for machine-to-machine access

Implicit grant for user-authorized access and Authorization Code for machine-to-machine

Which of the following is an example of a risk signal used in risk-based elevation?

The user's account creation date

The user's IP address or geolocation

What is a key characteristic of a stand-alone trust relationship?

Domains automatically trust each other

Users can use a single sign-on across all domains

Users must authenticate separately in each domain

All domains share the same user database

Which component in Kerberos issues ticket-granting tickets (TGTs)?

The ticket-granting server (TGS)

Information Systems Security Architecture Professional

Domain 4Objective 2

4.2 Architect Identity Authentication ISSAP Practice Questions (Page 7)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

13concepts

25%of the exam

Questions 31–35

31foundation · easy
Which of the following is a typical use case for RADIUS?
Select an answer first
32expert · hard
A company is building an API that allows third-party applications to access user data. They want to support both user-authorized access (where the user logs in and grants permission) and machine-to-machine access (where the application authenticates itself). Which OAuth 2.0 grant types should be implemented?
Select an answer first
33foundation · easy
Which of the following is an example of a risk signal used in risk-based elevation?
Select an answer first
34foundation · easy
What is a key characteristic of a stand-alone trust relationship?
Select an answer first
35foundation · easy
Which component in Kerberos issues ticket-granting tickets (TGTs)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.