Which of the following BEST explains SAML?

Question

Options

• AA security attestation model built on XML and SOAP-based services, which allows for the exchange
• BAn XML and SOAP-based protocol, which enables the use of PKI for code signing and SSO by using
• CA security model built on the transfer of assertions over XML and SOAP-based protocols, which allows
• DA security verification model built on SSO and SSL-based services, which allows for the exchange of

• A
  91% (31)
• B
  6% (2)
• C
  3% (1)

Explanation

SAML (Security Assertion Markup Language) is an open standard for exchanging authentication and authorization data between parties - typically an Identity Provider (IdP) and a Service Provider (SP). Answer A correctly identifies the core traits: it is a security attestation model (it conveys assertions about identity and attributes), it is built on XML (the data format) and SOAP-based services (the transport mechanism), and it enables the exchange of identity/authentication information between parties, which underpins Single Sign-On (SSO). Option B incorrectly emphasizes PKI for code signing as a primary use case. Option C is close but less precise. Option D incorrectly replaces XML/SOAP with SSL-based services as the foundation, which is inaccurate - SAML uses XML assertions, not SSL as its core protocol.

No community discussion yet for this question.