A company requires multifactor authentication. When accessing one of the available RemoteApp programs that requires authentication, the user is not prompted to enter a pin. Which of the following…

Question

Options

• APrinciple of least privilege
• BPassword expiration
• CSingle sign-on
• DPermission inheritance

• A
  7% (2)
• B
  4% (1)
• C
  4% (1)
• D
  85% (23)

Explanation

Permission inheritance (D) describes the scenario where a child object automatically inherits the security context - including authentication state - from its parent. In Windows Remote Desktop Services, a RemoteApp runs within the context of an RD session that was already authenticated. Because the parent RDS session already satisfied the MFA requirement (including PIN entry), the RemoteApp inherits that authenticated session's permissions and does not prompt for credentials again. The authentication was performed at the session level, and the child application inherits it. While this may appear similar to Single Sign-On (C), SSO specifically refers to a centralized authentication system that grants access to multiple independent systems with one login, whereas here the behavior is driven by inheritance within the same RDS permission structure.

No community discussion yet for this question.