7.1 Identify and Describe Identity and Access Management (IAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary benefit of single sign-on (SSO) for users?

   • AThey can access applications without any authentication
   • BThey only need to authenticate once to access multiple applications
   • CThey no longer need to use any passwords
   • DThey can use the same password for every application
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an example of a directory service?

   • AA network firewall
   • BA web server like Apache
   • CA database management system like MySQL
   • DMicrosoft Active Directory
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company implements SSO for its internal applications. A user logs in with their corporate credentials and is then able to access the email system, the CRM, and the file sharing service without logging in again. Which of the following is a key security benefit of this approach?

   • AIt automatically grants users access to all applications
   • BIt reduces the number of passwords users need to remember
   • CIt allows the company to share identities with external partners
   • DIt eliminates the need for multifactor authentication
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of federation in identity management?

   • ATo enable identity sharing across trusted organizations using standards like SAML
   • BTo allow users to use the same password across multiple applications within one organization
   • CTo store user credentials in a central database
   • DTo eliminate the need for authentication entirely
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is a primary limitation of single-factor authentication?

   • AIt requires users to remember multiple passwords for different systems
   • BIt cannot be used with cloud-based applications
   • CIt is vulnerable to credential theft because only one factor protects the account
   • DIt requires expensive hardware tokens for every user
   Reveal Solution Discussion Select an answer first