Examkin

Soru

Zorluk: KolayIdentity and Access Management Architecture

An organization wants to enable its employees to access an external web-based software application using their existing internal network credentials without prompting them to re-enter their passwords. Which of the following identity architecture technologies best satisfies this requirement?

  1. Federated Single Sign-On using Security Assertion Markup Language (SAML)Cevap
  2. B
    Role-Based Access Control (RBAC) rules applied at the application database level
  3. C
    Perimeter firewall access control lists (ACLs) permitting direct client traffic
  4. D
    Deploying a host-based intrusion prevention system (HIPS) on client workstations

Cevap

Federated Single Sign-On using Security Assertion Markup Language (SAML)
Federated Single Sign-On (SSO) using SAML (Security Assertion Markup Language) allows an organization's Identity Provider (IdP) to authenticate users locally and pass secure tokens to an external Service Provider (SP). This eliminates the need for users to re-enter credentials when accessing third-party software.

Adım Adım Çözüm

1
Analyze the scenario requirement
The requirement asks for a solution allowing internal corporate credentials to authenticate access to an external third-party application without multiple password prompts.
This requires a federated identity architecture that establishes trust between an internal Identity Provider (IdP) and an external Service Provider (SP).
2
Evaluate potential IAM protocols and technologies
SAML is standard for browser-based federated single sign-on between enterprise identity stores and cloud services.
SAML tokens securely transmit authentication assertions between the enterprise and the application.

Anahtar Kavram

Federated Identity Management and Single Sign-On (SSO)
Bu soruyu puanla

Konular

Identity and Access Management Architecture

Bu konudan daha fazla soru