Which of the following password authentication schemes enables a user with a domain account to log on to a network once, using a password or smart card, and to gain access to multiple computers in…

Question

Options

• ASingle Sign-On
• BOne-time password
• CDynamic
• DKerberos

• A
  92% (24)
• B
  4% (1)
• D
  4% (1)

Explanation

Single Sign-On (SSO) is correct because it is specifically designed to authenticate a user once - via password or smart card - and grant seamless access to all resources within a domain without repeated login prompts, which matches the question exactly.

Why the distractors are wrong:

• B. One-time password (OTP) generates a temporary, single-use credential for each login - the opposite of "log in once, access many."
• C. Dynamic is not a standard authentication scheme; it's a distractor with no specific protocol definition in this context.
• D. Kerberos is the underlying protocol that makes SSO possible in Windows domains (Active Directory), but Kerberos itself is a ticket-granting mechanism, not the named scheme that describes the user experience. SSO is the correct answer because the question asks what enables the behavior, framed from the user/policy perspective.

Memory tip: Think "Single Sign-On = sign in once, on to everything." The word "single" in SSO directly mirrors "once" in the question - if you see "log on once, access multiple resources," map it straight to SSO.

No community discussion yet for this question.