nerdexam
F5

101 · Question #675

Which two functions of AAA does Security Assertion Markup Language (SAML) identity Provider (IdP) offer (Choose two)?

The correct answer is B. provide authentication D. provide session auditing. SAML IdP fulfills the authentication and auditing roles within AAA by verifying user identity and generating signed assertions that create an auditable session record.

Section 4: Security Basics

Question

Which two functions of AAA does Security Assertion Markup Language (SAML) identity Provider (IdP) offer (Choose two)?

Options

  • Ameasure usage
  • Bprovide authentication
  • Cprovide availability
  • Dprovide session auditing
  • Efilter access

How the community answered

(64 responses)
  • A
    5% (3)
  • B
    80% (51)
  • C
    3% (2)
  • E
    13% (8)

Why each option

SAML IdP fulfills the authentication and auditing roles within AAA by verifying user identity and generating signed assertions that create an auditable session record.

Ameasure usage

Measuring usage is an accounting function typically handled by RADIUS or TACACS+, not by a SAML IdP which focuses on identity assertion.

Bprovide authenticationCorrect

SAML IdP is specifically designed to authenticate users by validating credentials and issuing cryptographically signed assertions that confirm identity to service providers, directly fulfilling the authentication function of AAA.

Cprovide availability

Providing availability is a network reliability concern addressed by redundancy and load balancing technologies, not an AAA function at all.

Dprovide session auditingCorrect

SAML IdP generates assertion logs for each authentication event, providing a timestamped record of user sessions that supports the accounting/auditing component of AAA and enables administrators to review access history.

Efilter access

Filtering access is an authorization or firewall function enforced by policy engines or access control lists, not a core capability of a SAML IdP.

Concept tested: SAML IdP roles within AAA authentication and auditing

Source: https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

Topics

#SAML#Identity Provider#AAA#authentication and auditing

Community Discussion

No community discussion yet for this question.

Full 101 Practice