nerdexam
CompTIA

CAS-001 · Question #328

Which of the following is an example of single sign-on?

The correct answer is D. A web access control infrastructure performs authentication and passes attributes in a HTTP header to. True SSO means a user authenticates once and gains access to multiple systems without re-authenticating. Option D describes a web access management (WAM) infrastructure (such as Oracle Access Manager or SiteMinder) that authenticates the user at a central point and then passes…

Technical Integration of Enterprise Components

Question

Which of the following is an example of single sign-on?

Options

  • AAn administrator manages multiple platforms with the same username and hardware token.
  • BMultiple applications have been integrated with a centralized LDAP directory for authentication and
  • CA password is synchronized between multiple platforms and the user is required to authenticate with the
  • DA web access control infrastructure performs authentication and passes attributes in a HTTP header to

How the community answered

(21 responses)
  • A
    5% (1)
  • D
    95% (20)

Explanation

True SSO means a user authenticates once and gains access to multiple systems without re-authenticating. Option D describes a web access management (WAM) infrastructure (such as Oracle Access Manager or SiteMinder) that authenticates the user at a central point and then passes identity attributes via HTTP headers to downstream applications - the applications trust these headers and grant access without prompting for credentials again. This is the canonical SSO pattern. Option A describes shared credentials across platforms, not SSO - the user still authenticates separately to each. Option B describes centralized LDAP authentication, which is a prerequisite for SSO but not SSO itself if users must log in to each application individually. Option C is password synchronization - users still authenticate multiple times, just with the same password.

Topics

#single sign-on#web access control#HTTP header attributes#federated authentication

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice