Which of the following BEST explains SAML?

Question

Options

• AA security attestation model built on XML and SOAP-based services, which allows for the
• BAn XML and SOAP-based protocol, which enables the use of PKI for code signing and SSO
• CA security model built on the transfer of assertions over XML and SOAP-based protocols,
• DA security verification model built on SSO and SSL-based services, which allows for the

• A
  88% (30)
• B
  3% (1)
• C
  6% (2)
• D
  3% (1)

Explanation

SAML (Security Assertion Markup Language) is an open standard for exchanging authentication and authorization data between parties, specifically between an Identity Provider (IdP) and a Service Provider (SP). It is built on XML for the assertion format and uses SOAP-based web services for transport. SAML enables single sign-on (SSO) by allowing an IdP to issue signed XML assertions about a user's identity and attributes, which the SP accepts as proof of authentication. Option A correctly captures the XML/SOAP foundation and the assertion/SSO capability. Option B incorrectly conflates SAML with PKI code signing. Option C partially describes SAML but mischaracterizes the protocol. Option D incorrectly substitutes SSL as a core component-SSL/TLS is used for transport security, not as a defining element of SAML itself.

No community discussion yet for this question.