nerdexam
CompTIA

CV0-002 · Question #551

The end users of a SaaS application use multiple services from the same application. A unique login ID and password are required for each user to access each service. Which of the following access…

The correct answer is B. SAML. Users accessing multiple services within a SaaS application require separate credentials for each service. The goal is to simplify this access method.

Security

Question

The end users of a SaaS application use multiple services from the same application. A unique login ID and password are required for each user to access each service. Which of the following access control methods should be implemented by the SaaS application vendor to simplify the access to its services?

Options

  • ARBAC
  • BSAML
  • CSSO
  • DMFA

How the community answered

(41 responses)
  • B
    95% (39)
  • C
    2% (1)
  • D
    2% (1)

Why each option

Users accessing multiple services within a SaaS application require separate credentials for each service. The goal is to simplify this access method.

ARBAC

RBAC (Role-Based Access Control) is an authorization method that assigns permissions based on user roles, not a method to simplify the initial authentication process across multiple services.

BSAMLCorrect

SAML (Security Assertion Markup Language) is an XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Implementing SAML allows users to authenticate once with an identity provider and then gain access to multiple services (service providers) without re-entering credentials, which is the core principle of Single Sign-On (SSO). SAML facilitates the federation of identity, simplifying access across multiple services.

CSSO

SSO (Single Sign-On) is the desired outcome of simplifying access, but SAML is a specific protocol or method used to achieve that outcome.

DMFA

MFA (Multi-Factor Authentication) enhances security by requiring multiple verification factors but does not simplify the process of accessing multiple services with different credentials.

Concept tested: Single Sign-On protocols

Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol

Topics

#SaaS security#single sign-on (SSO)#SAML#identity management

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice