In an OpenID Connect (OIDC) flow, what is the primary purpose of the ID token?

To encrypt all communication between the client and the authorization server

To grant the client application access to the user's protected resources on a resource server

To store the user's password securely on the client device

To provide the client application with identity information about the authenticated user

A company has multiple internal web applications that use different authentication mechanisms. The IT team wants to implement SSO so users authenticate once and access all applications. The applications are a mix of legacy apps that support only SAML and modern apps that support OpenID Connect. Which solution should they choose?

Implement a RADIUS server for all applications.

Use a password manager to store all application credentials.

Upgrade all legacy applications to support OpenID Connect.

Deploy an identity provider that supports both SAML and OpenID Connect, and configure each application to use it.

What is the primary purpose of Single Sign-On (SSO) in an enterprise environment?

To eliminate the need for passwords entirely by using biometric-only authentication

To allow users to authenticate once and gain access to multiple applications without re-entering credentials

To synchronize user passwords across all systems in real time

To provide a separate username and password for each application to increase security

Which combination of authentication factors represents a true multi-factor authentication (MFA) scenario?

A password and a personal identification number (PIN)

Two different one-time passwords (OTPs) sent to the same device

A smart card and a fingerprint scan

How does a Trusted Platform Module (TPM) contribute to device authentication?

It provides a hardware-based secure enclave for storing cryptographic keys that are used to prove the device's identity

It provides a firewall to block unauthorized network traffic

It encrypts the entire hard drive using a software-based algorithm

It assigns a unique MAC address to the network interface card

Systems Security Certified Practitioner

Domain 2Objective 1

2.1 - Implement and Maintain Authentication Methods SSCP Practice Questions (Page 5)

Part of the Access Controls domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

15%of the exam

Questions 21–25

21foundation · easy
In an OpenID Connect (OIDC) flow, what is the primary purpose of the ID token?
Select an answer first
22application · medium
A company has multiple internal web applications that use different authentication mechanisms. The IT team wants to implement SSO so users authenticate once and access all applications. The applications are a mix of legacy apps that support only SAML and modern apps that support OpenID Connect. Which solution should they choose?
Select an answer first
23foundation · easy
What is the primary purpose of Single Sign-On (SSO) in an enterprise environment?
Select an answer first
24foundation · easy
Which combination of authentication factors represents a true multi-factor authentication (MFA) scenario?
Select an answer first
25foundation · easy
How does a Trusted Platform Module (TPM) contribute to device authentication?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.