nerdexam
CompTIA

CV0-003 · Question #254

A company that provides cloud-based storage services allows user authentication using third- party social network credentials. Which of the following should be implemented to accomplish this task?

The correct answer is A. Multifactor authentication. Allowing authentication via third-party social network credentials implements multifactor authentication by combining the cloud service's access with an external identity verification layer provided by the social network.

Security

Question

A company that provides cloud-based storage services allows user authentication using third- party social network credentials. Which of the following should be implemented to accomplish this task?

Options

  • AMultifactor authentication
  • BVirtual private network
  • CFederation
  • DDomain trusts

How the community answered

(29 responses)
  • A
    90% (26)
  • C
    7% (2)
  • D
    3% (1)

Why each option

Allowing authentication via third-party social network credentials implements multifactor authentication by combining the cloud service's access with an external identity verification layer provided by the social network.

AMultifactor authenticationCorrect

Multifactor authentication requires users to verify their identity using more than one method, and integrating a third-party social network credential adds an external verification factor to the authentication flow. The social network independently authenticates the user through its own credentials before granting access to the cloud service, constituting an additional factor beyond a single shared secret. This approach increases security by requiring valid authentication from a trusted third-party identity source that the user already possesses.

BVirtual private network

A VPN encrypts network traffic between endpoints but does not provide an identity verification mechanism for authenticating users via external third-party credentials.

CFederation

Federation describes trust relationships between separate organizational identity domains - typically enterprise SAML or ADFS configurations - rather than consumer-facing social network credential authentication.

DDomain trusts

Domain trusts are a Windows Active Directory mechanism for cross-domain authentication within enterprise environments and are not applicable to social network credential integration in cloud storage services.

Concept tested: Multifactor authentication using third-party identity providers

Source: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks

Topics

#federation#OAuth#social login#identity management

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice