GSLC · Question #426
Which of the following password authentication schemes enables a user with a domain account to log on to a network once, using a password or smart card, and to gain access to multiple computers in…
The correct answer is A. Single Sign-On. Single Sign-On (SSO) is the authentication scheme that allows a user to authenticate once and gain access to multiple resources without repeated login prompts.
Question
Which of the following password authentication schemes enables a user with a domain account to log on to a network once, using a password or smart card, and to gain access to multiple computers in the domain without being prompted to log in again?
Options
- ASingle Sign-On
- BDynamic
- COne-time password
- DKerberos
How the community answered
(60 responses)- A90% (54)
- B5% (3)
- C2% (1)
- D3% (2)
Why each option
Single Sign-On (SSO) is the authentication scheme that allows a user to authenticate once and gain access to multiple resources without repeated login prompts.
Single Sign-On is the authentication concept where a user provides credentials one time and is granted access to multiple systems or resources within a domain without being re-prompted. In Windows domains, SSO is implemented using Kerberos tickets, but SSO is the named scheme or model that describes this user-facing behavior.
Dynamic is not a defined password authentication scheme relevant to domain logon or multi-resource access.
A one-time password (OTP) is a password valid for only a single session or transaction, which is the opposite of the persistent access described in the question.
Kerberos is the underlying network authentication protocol that enables SSO in Windows domains, but it is not itself the name of the authentication scheme being described.
Concept tested: Single Sign-On authentication scheme in domain environments
Source: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on
Topics
Community Discussion
No community discussion yet for this question.