CCSP · Question #197
Which of the following best describes SAML?
The correct answer is C. A standard for exchanging authentication and authorization data between security domains. SAML (Security Assertion Markup Language) is an XML-based standard for securely exchanging authentication and authorization data between disparate security domains.
Question
Which of the following best describes SAML?
Options
- AA standard for developing secure application management logistics
- BA standard for exchanging usernames and passwords across devices
- CA standard for exchanging authentication and authorization data between security domains
- DA standard used for directory synchronization
How the community answered
(16 responses)- C94% (15)
- D6% (1)
Why each option
SAML (Security Assertion Markup Language) is an XML-based standard for securely exchanging authentication and authorization data between disparate security domains.
This is an invented term and does not accurately describe SAML's purpose.
SAML does not directly exchange usernames and passwords; instead, it exchanges cryptographically signed assertions containing authentication and authorization information.
SAML (Security Assertion Markup Language) is an open standard that allows identity providers (IdPs) to pass authorization and authentication credentials to service providers (SPs). It facilitates single sign-on (SSO) by enabling secure communication of user identity and attributes between different security domains, ensuring a consistent and trusted exchange of authentication and authorization data.
SAML is not used for directory synchronization; directory synchronization involves replicating user and group information between directories, typically handled by protocols like LDAP or specific sync tools.
Concept tested: SAML purpose and function
Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/security-assertion-markup-language
Topics
Community Discussion
No community discussion yet for this question.