nerdexam
(ISC)2

CCSP · Question #19

Which of the following best describes SAML?

The correct answer is B. A standard for exchanging authentication and authorization data between security domains. SAML (Security Assertion Markup Language) is an XML-based standard specifically designed to enable the secure exchange of authentication and authorization data between an identity provider and a service provider. It's crucial for single sign-on (SSO) scenarios across different…

Submitted by kim_seoul· Apr 18, 2026Cloud Application Security

Question

Which of the following best describes SAML?

Options

  • AA standard for developing secure application management logistics
  • BA standard for exchanging authentication and authorization data between security domains
  • CA standard for exchanging usernames and passwords across devices
  • DA standard used for directory synchronization

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    92% (44)
  • C
    2% (1)
  • D
    4% (2)

Why each option

SAML (Security Assertion Markup Language) is an XML-based standard specifically designed to enable the secure exchange of authentication and authorization data between an identity provider and a service provider. It's crucial for single sign-on (SSO) scenarios across different security domains.

AA standard for developing secure application management logistics

SAML is not a standard for general application management logistics; its scope is specifically identity and access management.

BA standard for exchanging authentication and authorization data between security domainsCorrect

SAML (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between an identity provider (IdP) and a service provider (SP). It enables single sign-on (SSO) by allowing a user to authenticate once with an IdP and then gain access to multiple SPs without re-authenticating.

CA standard for exchanging usernames and passwords across devices

SAML exchanges assertions about a user's identity and attributes, not raw usernames and passwords directly, which enhances security.

DA standard used for directory synchronization

SAML is used for federated identity and SSO, not for synchronizing entire directories between systems, which is typically handled by protocols like SCIM or LDAP replication.

Concept tested: Security Assertion Markup Language (SAML) purpose

Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol

Topics

#SAML#Authentication#Authorization#Identity Federation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CCSP Practice