CISSP Question #1240: Real Exam Question with Answer & Explanation

Question

Which of the following is TRUE for an organization that is using a third-party federated identity service?

Options

• AThe organization enforces the rules to other organization's user provisioning
• BThe organization establishes a trust relationship with the other organizations
• CThe organization defines internal standard for overall user identification
• DThe organization specifies alone how to authenticate other organization's users

Explanation

The true statement for an organization that is using a third-party federated identity service is that the organization establishes a trust relationship with the other organizations. A federated identity service is a service that enables users to access multiple applications or systems across different domains or organizations using a single identity and authentication method. A federated identity service relies on a trust relationship between the identity provider (IdP), which is the organization that issues and manages the user's identity, and the service provider (SP), which is the organization that provides the application or system that the user wants to access. The trust relationship is established by using standards and protocols, such as SAML, OAuth, or OpenID Connect, that enable the exchange of identity and authentication information between the IdP and

No community discussion yet for this question.