CompTIA
CV0-003 · Question #427
CV0-003 Question #427: Real Exam Question with Answer & Explanation
The correct answer is A: Certificates. Single sign-on eliminates repeated credential prompts across applications, and digital certificates provide portable identity credentials that can authenticate against varied identity stores.
Security
Question
A cloud application development team needs to consider the following requirements to the built in as part of the application's authentication process: - Customers should have the flexibility to use their own identity stores within the authentication process. - Customers should not be asked to provide the credentials repeatedly for different applications with different permission sets. Which of the following solutions would BEST help the team achieve the above business objectives? (Choose two.)
Options
- ACertificates
- BSingle sign-on
- COne-time passwords
- DFederation
- EMultifactor authentication
- FHardware tokens
Explanation
Single sign-on eliminates repeated credential prompts across applications, and digital certificates provide portable identity credentials that can authenticate against varied identity stores.
Common mistakes.
- C. One-time passwords are a per-session or per-transaction second-factor mechanism and do not reduce the number of authentication prompts a user encounters across different applications.
- D. Federation describes the trust agreement between identity providers and service providers but is a framework, not an end-user authentication mechanism, and does not on its own prevent repeated credential prompts.
- E. Multifactor authentication adds additional verification steps to the login process and increases friction rather than reducing the number of times users are prompted across applications.
- F. Hardware tokens generate time-based or event-based codes for MFA and do not provide cross-application single sign-on or support flexible identity store integration.
Concept tested. SSO and certificate-based cross-application authentication
Reference. https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/what-is-single-sign-on
Topics
#single sign-on#federation#identity management#authentication
Community Discussion
No community discussion yet for this question.