nerdexam
GIAC

GSLC · Question #426

Which of the following password authentication schemes enables a user with a domain account to log on to a network once, using a password or smart card, and to gain access to multiple computers in…

The correct answer is A. Single Sign-On. Single Sign-On (SSO) is the authentication scheme that allows a user to authenticate once and gain access to multiple resources without repeated login prompts.

Security Architecture & Engineering

Question

Which of the following password authentication schemes enables a user with a domain account to log on to a network once, using a password or smart card, and to gain access to multiple computers in the domain without being prompted to log in again?

Options

  • ASingle Sign-On
  • BDynamic
  • COne-time password
  • DKerberos

How the community answered

(60 responses)
  • A
    90% (54)
  • B
    5% (3)
  • C
    2% (1)
  • D
    3% (2)

Why each option

Single Sign-On (SSO) is the authentication scheme that allows a user to authenticate once and gain access to multiple resources without repeated login prompts.

ASingle Sign-OnCorrect

Single Sign-On is the authentication concept where a user provides credentials one time and is granted access to multiple systems or resources within a domain without being re-prompted. In Windows domains, SSO is implemented using Kerberos tickets, but SSO is the named scheme or model that describes this user-facing behavior.

BDynamic

Dynamic is not a defined password authentication scheme relevant to domain logon or multi-resource access.

COne-time password

A one-time password (OTP) is a password valid for only a single session or transaction, which is the opposite of the persistent access described in the question.

DKerberos

Kerberos is the underlying network authentication protocol that enables SSO in Windows domains, but it is not itself the name of the authentication scheme being described.

Concept tested: Single Sign-On authentication scheme in domain environments

Source: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on

Topics

#Single Sign-On#authentication#domain accounts#Kerberos

Community Discussion

No community discussion yet for this question.

Full GSLC Practice