nerdexam
CompTIA

CAS-002 · Question #194

Company ABC was formed by combining numerous companies which all had multiple databases, web portals, and cloud data sets. Each data store had a unique set of custom developed authentication…

The correct answer is D. Federated IDs. Federated identity allows existing disparate authentication systems to interoperate through trust relationships, avoiding the cost of rebuilding or replacing any of them.

Technical Integration of Enterprise Components

Question

Company ABC was formed by combining numerous companies which all had multiple databases, web portals, and cloud data sets. Each data store had a unique set of custom developed authentication mechanisms and schemas. Which of the following approaches to combining the disparate mechanisms has the LOWEST up front development costs?

Options

  • AAttestation
  • BPKI
  • CBiometrics
  • DFederated IDs

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    9% (2)
  • D
    82% (18)

Why each option

Federated identity allows existing disparate authentication systems to interoperate through trust relationships, avoiding the cost of rebuilding or replacing any of them.

AAttestation

Attestation is a process for verifying hardware or software integrity, not a mechanism for combining or federating disparate user authentication systems.

BPKI

PKI requires deploying or expanding a certificate authority infrastructure and potentially re-issuing credentials to all users, resulting in significant upfront costs.

CBiometrics

Biometrics requires purchasing and deploying hardware sensors across all locations and building new enrollment databases, incurring substantial upfront investment.

DFederated IDsCorrect

Federated identity (using standards like SAML or OAuth/OIDC) establishes trust relationships between existing identity providers without requiring custom development or replacement of the underlying authentication systems, making it the lowest-cost approach to combining disparate mechanisms already in place across the merged entity.

Concept tested: Federated identity for low-cost disparate authentication integration

Source: https://pages.nist.gov/800-63-3/sp800-63c.html

Topics

#federated identity#authentication consolidation#identity management#cost analysis

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice