2.1 - Implement and Maintain Authentication Methods SSCP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In a federated identity scenario, what is the role of the service provider (SP)?

   • ATo consume the identity assertion from the identity provider and grant access to its own resources
   • BTo authenticate the user and issue a token
   • CTo manage the user's password reset process
   • DTo store the user's biometric data
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A mid-sized company has deployed an on-premises Active Directory environment and recently adopted Microsoft 365. Employees are frustrated by having to remember separate credentials for their local workstations and for Microsoft 365. The IT team wants users to sign in once with their corporate credentials and then access both on-premises applications and Microsoft 365 without being prompted again. Which solution should the IT team implement?

   • ACreate separate user accounts in Microsoft 365 with the same password as the local accounts.
   • BSet up an on-premises RADIUS server to authenticate all Microsoft 365 logins.
   • CConfigure Azure AD Connect with password hash synchronization and enable seamless SSO.
   • DDeploy a certificate authority and issue smart cards to all employees.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In a SAML-based federated authentication flow, what is the function of the SAML assertion?

   • AIt is a request sent by the service provider to the identity provider to ask for authentication
   • BIt is a JSON Web Token (JWT) that contains the user's access token
   • CIt is a cookie stored on the user's browser to maintain the session
   • DIt is a digitally signed XML document that contains statements about the user's identity and attributes
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company uses an on-premises Active Directory and wants to enable SSO for a new cloud-based HR application that supports OpenID Connect. The company does not want to synchronize passwords to the cloud. Which configuration should they implement?

   • ACreate a custom LDAP directory in the cloud and sync users to it.
   • BUse Azure AD Connect with password hash synchronization and configure the HR app for SSO.
   • CDeploy Active Directory Federation Services (ADFS) as the identity provider and configure the HR app to use ADFS for OpenID Connect authentication.
   • DSet up a RADIUS server to authenticate users for the HR app.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has a mobile app that needs to access a user's calendar data from a third-party provider. The app should not receive the user's calendar credentials. The company wants to implement a solution where the user grants the app limited access to their calendar for a specific time period. Which protocol and grant type should be used?

   • ALDAP bind with the user's calendar username and password.
   • BSAML 2.0 with an authentication request from the app.
   • COAuth2 with the client credentials grant.
   • DOAuth2 with the authorization code grant and scopes.
   Reveal Solution Discussion Select an answer first