CCSP · Question #839
Which of the following best describes SAML?
The correct answer is D. A standards for exchanging authentication and authorization data between security domains.. This question asks for the best description of SAML (Security Assertion Markup Language).
Question
Which of the following best describes SAML?
Options
- AA standard used for directory synchronization
- BA standard for developing secure application management logistics
- CA standard for exchanging usernames and passwords across devices.
- DA standards for exchanging authentication and authorization data between security domains.
How the community answered
(33 responses)- A3% (1)
- B3% (1)
- C6% (2)
- D88% (29)
Why each option
This question asks for the best description of SAML (Security Assertion Markup Language).
SAML is not primarily a standard for directory synchronization; that role is typically filled by protocols like LDAP or SCIM.
SAML is an acronym for Security Assertion Markup Language and is not related to 'secure application management logistics.'
SAML does not directly exchange usernames and passwords; instead, it exchanges assertions about a user's identity and attributes after they have been authenticated by an identity provider.
D is correct because SAML (Security Assertion Markup Language) is an XML-based standard specifically designed for exchanging authentication and authorization data between an identity provider and a service provider. This enables single sign-on (SSO) functionality across different security domains by securely communicating user identity and permissions.
Concept tested: SAML authentication and authorization data exchange
Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol
Topics
Community Discussion
No community discussion yet for this question.