nerdexam
(ISC)2

SSCP · Question #910

Which of the following is implemented through scripts or smart agents that replays the users multiple log-ins against authentication servers to verify a user's identity which permit access to system…

The correct answer is A. Single Sign-On. Single Sign-On (SSO) works by authenticating a user once and then using scripts or smart agents to automatically replay (supply) that user's credentials against multiple downstream authentication servers - granting seamless access to various system services without repeated…

Submitted by olafpl· Apr 18, 2026Access Controls

Question

Which of the following is implemented through scripts or smart agents that replays the users multiple log-ins against authentication servers to verify a user's identity which permit access to system services?

Options

  • ASingle Sign-On
  • BDynamic Sign-On
  • CSmart cards
  • DKerberos

How the community answered

(24 responses)
  • A
    92% (22)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Single Sign-On (SSO) works by authenticating a user once and then using scripts or smart agents to automatically replay (supply) that user's credentials against multiple downstream authentication servers - granting seamless access to various system services without repeated manual logins. This agent-based credential replay is a defining characteristic of how SSO implementations operate under the hood.

Why the distractors are wrong:

  • B. Dynamic Sign-On is not a recognized authentication standard or protocol - it's a fabricated term used as a distractor.
  • C. Smart cards are physical hardware tokens that store cryptographic credentials; they don't involve scripts or agents replaying logins across servers.
  • D. Kerberos is a ticket-based authentication protocol that avoids replaying passwords entirely - it issues time-limited tickets via a Key Distribution Center (KDC), which is fundamentally different from credential replay.

Memory tip: Think of SSO as having a personal agent who memorizes your password and types it in for you everywhere - the agent replays your login so you only had to sign in once. Kerberos, by contrast, gives you a ticket (like a VIP wristband), so no password replay is needed at all.

Topics

#Single Sign-On#Authentication#Access Control#Identity Management

Community Discussion

No community discussion yet for this question.

Full SSCP Practice