Which of the following describes the major disadvantage of many Single Sign-On (SSO) implementations?

Question

Options

• AOnce an individual obtains access to the system through the initial log-on, they have access
• BThe initial logon process is cumbersome to discourage potential intruders.
• COnce a user obtains access to the system through the initial log-on, they only need to logon
• DOnce a user obtains access to the system through the initial log-on, he has to logout from all

• A
  90% (37)
• B
  2% (1)
• C
  2% (1)
• D
  5% (2)

Explanation

Option A is correct because SSO creates a single point of failure: once an attacker compromises a user's credentials, they gain access to every system connected under that SSO umbrella - not just one. This "all eggs in one basket" risk is the defining trade-off of SSO; a breach of the primary credential is a breach of everything.

Why the distractors are wrong:

• B is backwards - SSO is designed to make login convenient, not cumbersome. A cumbersome login would actually reduce the appeal of SSO.
• C describes the primary benefit of SSO (log on once, access many), not a disadvantage.
• D describes a logout behavior that, while potentially inconvenient, is not considered the major disadvantage - and federated SSO systems typically handle this automatically.

Memory tip: Think of SSO as a master key. The convenience is the same reason it's dangerous - one key opens every door. If someone steals that key, they own the whole building.

No community discussion yet for this question.