4.2 Architect Identity Authentication ISSAP Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is the primary purpose of a service ticket in Kerberos?

   • ATo replace the need for a KDC
   • BTo authenticate the user to a specific service
   • CTo encrypt all network traffic
   • DTo store user passwords
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   Two companies plan to allow their employees to access each other's cloud applications using their own corporate credentials. They want to establish a relationship that enables SSO across both organizations without duplicating user accounts. Which trust model should they implement?

   • ADirect trust with shared user accounts
   • BFederated trust with mutual identity provider relationships
   • CKerberos realm trust
   • DStand-alone trust with separate identity domains
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which protocol is commonly used for centralized authentication, authorization, and accounting for network access?

   • AKerberos
   • BRADIUS
   • CLDAP
   • DSAML
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is a trust relationship in identity management?

   • AAn agreement that allows one domain to accept authentication from another
   • BA protocol for transferring files
   • CA type of firewall rule
   • DA method for encrypting passwords
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which of the following is a primary weakness of single-factor authentication?

   • AIt cannot be used with directory services
   • BIt is computationally expensive to implement
   • CIt is vulnerable to credential theft or reuse
   • DIt requires multiple devices to be present
   Reveal Solution Discussion Select an answer first