Drag and Drop Question Drag and drop the SAML components from the left onto the descriptions on the right. Answer:

Question

Exhibit

Answer Area

Explanation

This question tests the understanding of core SAML components by requiring the test-taker to match each component to its correct definition.

Approach. The correct interaction is to drag each SAML component from the left column to its accurate description in the right column:

1. Drag 'assertion' to 'Security information packets and statements sent to service providers by the IdP.' - An assertion is an XML document containing security information (e.g., authentication, authorization) about a subject, issued by the Identity Provider (IdP) to the Service Provider (SP).
2. Drag 'binding' to 'The mapping between SAML messages and protocols such as HTTP POST.' - A SAML binding defines how SAML messages are transported over lower-layer communication protocols, such as HTTP POST, HTTP Redirect, or SOAP.
3. Drag 'profile' to 'Detailed descriptions of SAML component combinations fro specific use cases.' - A SAML profile describes how SAML assertions, protocols, and bindings are combined to support a specific use case, like the Web Browser SSO Profile.
4. Drag 'protocol' to 'Rules for how SAML sends requests for and gets responses of security information.' - The SAML protocol specifies the request/response messages and their structure for exchanging security information between SAML entities (e.g., AuthNRequest, AuthNResponse).

Common mistakes.

• common_mistake. Common mistakes include confusing 'binding' with 'protocol', or 'profile' with general 'assertions'. For example, if 'binding' is matched with 'Rules for how SAML sends requests...', that would be incorrect because binding defines the transport mechanism (e.g., HTTP POST), whereas protocol defines the messages and rules for their exchange. Similarly, matching 'profile' to 'Security information packets...' is wrong because a profile defines a use case combining multiple components, not the security information itself (which is the assertion).

Concept tested. Security Assertion Markup Language (SAML) core components and their definitions, specifically assertion, binding, profile, and protocol.

No community discussion yet for this question.