nerdexam
CompTIA

CAS-002 · Question #554

Company XYZ provides residential television cable service across a large region. The company's board of directors is in the process of approving a deal with the following three companies: - A…

The correct answer is D. Company XYZ needs to install the IdP, while the partner companies need to install the SP. This question tests understanding of federated identity using SAML, where the data-owning organization acts as the Identity Provider and partner organizations act as Service Providers.

Technical Integration of Enterprise Components

Question

Company XYZ provides residential television cable service across a large region. The company's board of directors is in the process of approving a deal with the following three companies:

  • A National landline telephone provider
  • A Regional wireless telephone provider
  • An international Internet service provider

The board of directors at Company XYZ wants to keep the companies and billing separated. While the Chief Information Officer (CIO) at Company XYZ is concerned about the confidentiality of Company XYZ's customer data and wants to share only minimal information about its customers for the purpose of accounting, billing, and customer authentication. The proposed solution must use open standards and must make it simple and seamless for Company XYZ's customers to receive all four services. Which of the following solutions is BEST suited for this scenario?

Options

  • AAll four companies must implement a TACACS+ web based single sign-on solution with
  • BCompany XYZ must implement VPN and strict access control to allow the other three
  • CCompany XYZ needs to install the SP, while the partner companies need to install the
  • DCompany XYZ needs to install the IdP, while the partner companies need to install the SP

How the community answered

(36 responses)
  • A
    8% (3)
  • B
    14% (5)
  • C
    6% (2)
  • D
    72% (26)

Why each option

This question tests understanding of federated identity using SAML, where the data-owning organization acts as the Identity Provider and partner organizations act as Service Providers.

AAll four companies must implement a TACACS+ web based single sign-on solution with

TACACS+ is a Cisco proprietary AAA protocol designed for network device administration, not a web-based open standard for federated cross-organizational SSO.

BCompany XYZ must implement VPN and strict access control to allow the other three

VPN with access control does not provide seamless customer-facing SSO and is not an open identity federation standard - it would require customers to manage separate credentials per service.

CCompany XYZ needs to install the SP, while the partner companies need to install the

If Company XYZ were the SP, it would delegate customer identity control to a partner, contradicting the CIO's requirement to keep customer data confidential and under Company XYZ's control.

DCompany XYZ needs to install the IdP, while the partner companies need to install the SPCorrect

Company XYZ owns and controls the customer identity data, making it the natural Identity Provider (IdP) in a SAML federation. The three partner companies consume that identity assertion to authenticate customers without needing to store or manage customer credentials directly. SAML is an open standard that supports cross-domain SSO and allows the IdP to share only the minimal claims needed for billing and authentication, satisfying the CIO's data minimization requirement.

Concept tested: SAML federation IdP vs SP role assignment

Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol

Topics

#federated identity#IdP SP model#data sharing#SSO

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-002 Practice