nerdexam
CompTIA

SY0-301 · Question #910

Which of the following is an XML based open standard used in the exchange of authentication and authorization information between different parties?

The correct answer is B. SAML. SAML (Security Assertion Markup Language) is the XML-based open standard specifically designed for exchanging authentication and authorization information between identity providers and service providers.

General security concepts

Question

Which of the following is an XML based open standard used in the exchange of authentication and authorization information between different parties?

Options

  • ALDAP
  • BSAML
  • CTACACS+
  • DKerberos

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    90% (18)
  • C
    5% (1)

Why each option

SAML (Security Assertion Markup Language) is the XML-based open standard specifically designed for exchanging authentication and authorization information between identity providers and service providers.

ALDAP

LDAP (Lightweight Directory Access Protocol) is a protocol for querying and modifying directory services like Active Directory; it is not XML-based and is not designed to exchange authentication assertions between different federated parties.

BSAMLCorrect

SAML is an OASIS open standard that uses XML to encode security assertions - statements about a subject's identity, attributes, and authorization decisions - and passes them between an Identity Provider (IdP) and a Service Provider (SP). It is the foundation of many enterprise Single Sign-On (SSO) implementations, allowing users to authenticate once and access multiple federated services. SAML 2.0 is the current widely-adopted version.

CTACACS+

TACACS+ is a Cisco-developed AAA protocol that uses TCP and its own binary encoding, not XML, and is designed for centralized device administration rather than federated identity exchange.

DKerberos

Kerberos is a ticket-based network authentication protocol that operates using binary tickets and symmetric cryptography, not XML, and is designed for authentication within a single domain or realm.

Concept tested: SAML as XML-based federated authentication standard

Source: https://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0.html

Topics

#SAML#federated identity#SSO#XML authentication

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice