nerdexam
CompTIA

CV0-002 · Question #560

A cloud administrator is troubleshooting SSO issues with an application server. The application server sits behind a load balancer device with WAF and reverse proxy services enabled. Which of the…

The correct answer is B. Multifactor. To resolve Single Sign-On (SSO) issues, the administrator should ensure that multifactor authentication (MFA) is disabled, as MFA often introduces additional verification steps that can interfere with the seamless, automated authentication flow of SSO.

Troubleshooting

Question

A cloud administrator is troubleshooting SSO issues with an application server. The application server sits behind a load balancer device with WAF and reverse proxy services enabled. Which of the following authentication types should the administrator ensure is disabled to allow SSO functions?

Options

  • AAnonymous
  • BMultifactor
  • CKerberos
  • DBasic

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    71% (22)
  • C
    10% (3)
  • D
    16% (5)

Why each option

To resolve Single Sign-On (SSO) issues, the administrator should ensure that multifactor authentication (MFA) is disabled, as MFA often introduces additional verification steps that can interfere with the seamless, automated authentication flow of SSO.

AAnonymous

Anonymous authentication allows access without credentials and is unrelated to SSO functionality, which relies on identified users.

BMultifactorCorrect

Multifactor authentication requires users to provide two or more verification factors, such as a password and a code from an authenticator app, which adds an extra step that can disrupt the automated token or cookie exchange mechanisms used by SSO to achieve a seamless login experience across applications. Temporarily disabling MFA can help isolate if it is the cause of SSO failure.

CKerberos

Kerberos is an authentication protocol often used with SSO, particularly in on-premises environments, and would typically be enabled, not disabled, for SSO.

DBasic

Basic authentication is a simple challenge-response mechanism that sends credentials unencrypted (unless over HTTPS) and does not inherently conflict with SSO, although SSO typically uses more advanced token-based methods.

Concept tested: Troubleshooting SSO and MFA conflicts

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Topics

#SSO#MFA#troubleshooting authentication#identity management

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice