SY0-501 · Question #15
An organization finds that most help desk calls ate regarding account lockout due to a variety of applications running on different systems. Manager is looking for a solution to reduce the number of…
The correct answer is C. Implement SSO. The organization is experiencing frequent account lockouts due to users managing multiple application credentials across different systems. Implementing Single Sign-On (SSO) is the best solution to centralize authentication, thereby reducing credential-related errors and…
Question
An organization finds that most help desk calls ate regarding account lockout due to a variety of applications running on different systems. Manager is looking for a solution to reduce the number of account lockouts while improving security. Which of the following is the BEST solution for this organization?
Options
- ACreate multiple application accounts for each user.
- BProvide secure tokens.
- CImplement SSO.
- DUtilize role-based access control.
How the community answered
(44 responses)- A7% (3)
- B2% (1)
- C77% (34)
- D14% (6)
Why each option
The organization is experiencing frequent account lockouts due to users managing multiple application credentials across different systems. Implementing Single Sign-On (SSO) is the best solution to centralize authentication, thereby reducing credential-related errors and enhancing security.
Creating multiple application accounts for each user would exacerbate the problem by forcing users to manage even more distinct credentials, increasing the risk of forgotten passwords and subsequent lockouts.
While secure tokens are an authentication component, simply providing them without an overarching SSO framework does not directly address the issue of users needing to manage separate credentials for each application, which is the root cause of the lockouts.
Implementing Single Sign-On (SSO) allows users to authenticate once and gain access to multiple applications without needing to re-enter credentials for each. This drastically reduces the likelihood of account lockouts by minimizing instances of users forgetting or mistyping different passwords across various systems.
Role-based access control (RBAC) manages authorization-what resources users can access based on their role-not authentication or the prevention of account lockouts caused by credential mismanagement across different systems.
Concept tested: Single Sign-On (SSO) benefits for authentication and security
Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/whatis-sso
Topics
Community Discussion
No community discussion yet for this question.