nerdexam
CompTIA

CAS-002 · Question #273

Which of the following is an example of single sign-on?

The correct answer is D. A web access control infrastructure performs authentication and passes attributes in a. Single sign-on (SSO) means a user authenticates once and the system passes identity attributes to downstream applications, eliminating repeated logins.

Enterprise Security

Question

Which of the following is an example of single sign-on?

Options

  • AAn administrator manages multiple platforms with the same username and hardware token.
  • BMultiple applications have been integrated with a centralized LDAP directory for
  • CA password is synchronized between multiple platforms and the user is required to
  • DA web access control infrastructure performs authentication and passes attributes in a

How the community answered

(41 responses)
  • A
    2% (1)
  • C
    5% (2)
  • D
    93% (38)

Why each option

Single sign-on (SSO) means a user authenticates once and the system passes identity attributes to downstream applications, eliminating repeated logins.

AAn administrator manages multiple platforms with the same username and hardware token.

Using the same username and hardware token across multiple platforms is shared multi-factor authentication, not SSO, because the user must still authenticate separately to each platform.

BMultiple applications have been integrated with a centralized LDAP directory for

Centralizing multiple applications against an LDAP directory enables directory-based identity management but does not by itself prevent users from having to authenticate individually to each application.

CA password is synchronized between multiple platforms and the user is required to

Password synchronization ensures the same credential works across systems but still requires the user to present that credential separately at each login prompt, which is not SSO.

DA web access control infrastructure performs authentication and passes attributes in aCorrect

A web access control (WAC) infrastructure authenticates the user a single time and then passes identity attributes - such as roles or group memberships - to downstream applications via headers or tokens, which is the defining mechanism of SSO. This means one authentication event grants seamless access to multiple resources without the user logging in again. The other options all involve either repeated authentication or mere credential synchronization, neither of which constitutes true SSO.

Concept tested: Single sign-on authentication and identity attribute passing

Source: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/what-is-single-sign-on

Topics

#SSO#web access control#attribute passing#authentication

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-002 Practice