CAS-003 · Question #322
While attending a meeting with the human resources department, an organization's information security officer sees an employee using a username and password written on a memo pad to log into a…
The correct answer is B. Implementing SSO. SSO eliminates the need for users to manage multiple separate passwords with different complexity rules and expiration schedules by providing a single authenticated session across all integrated applications.
Question
While attending a meeting with the human resources department, an organization's information security officer sees an employee using a username and password written on a memo pad to log into a specific service. When the information security officer inquires further as to why passwords are being written down, the response is that there are too many passwords to remember for all the different services the human resources department is required to use. Additionally, each password has specific complexity requirements and different expiration time frames. Which of the following would be the BEST solution for the information security officer to recommend?
Options
- AUtilizing MFA
- BImplementing SSO
- CDeploying 802.1X
- DPushing SAML adoption
- EImplementing TACACS
How the community answered
(35 responses)- A6% (2)
- B86% (30)
- C6% (2)
- E3% (1)
Why each option
SSO eliminates the need for users to manage multiple separate passwords with different complexity rules and expiration schedules by providing a single authenticated session across all integrated applications.
MFA adds a second authentication factor to each login but does not reduce the number of separate passwords users must manage, potentially increasing login friction without solving the password proliferation problem.
SSO (Single Sign-On) allows a user to authenticate once with a single credential set and gain seamless access to all integrated services, removing the operational burden of remembering separate passwords with different complexity requirements and expiration cycles - directly resolving the documented user behavior of writing passwords down.
802.1X is a port-based network access control protocol that authenticates devices to the network itself and is not designed to manage application-level credentials across multiple business services.
SAML is the federation protocol that underlies SSO implementations, but recommending 'SAML adoption' describes a technical mechanism rather than the solution-level answer; SSO is the correct recommendation that would incorporate SAML.
TACACS+ is an authentication protocol for network administrators accessing infrastructure devices such as routers and switches, and is not suited for end-user SSO across business applications.
Concept tested: SSO to consolidate user credentials across multiple applications
Source: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/what-is-single-sign-on
Topics
Community Discussion
No community discussion yet for this question.