nerdexam
CompTIA

SY0-501 · Question #500

An organization's employees currently use three different sets of credentials to access multiple internal resources. Management wants to make this process less complex. Which of the following would…

The correct answer is B. Single sign-on. To reduce the complexity of employees using multiple credentials for various internal resources, single sign-on is the most effective solution.

Submitted by khalil_dz· Mar 4, 2026Security architecture

Question

An organization's employees currently use three different sets of credentials to access multiple internal resources. Management wants to make this process less complex. Which of the following would be the BEST option to meet this goal?

Options

  • ATransitive trust
  • BSingle sign-on
  • CFederation
  • DSecure token

How the community answered

(40 responses)
  • A
    5% (2)
  • B
    83% (33)
  • C
    10% (4)
  • D
    3% (1)

Why each option

To reduce the complexity of employees using multiple credentials for various internal resources, single sign-on is the most effective solution.

ATransitive trust

Transitive trust is a concept in directory services (like Active Directory) where a trust relationship between two domains can extend to other domains in a forest, but it does not directly solve the user-facing problem of managing multiple credentials for multiple applications.

BSingle sign-onCorrect

Single sign-on (SSO) allows users to authenticate once with a single set of credentials and then gain access to multiple independent software systems without needing to re-authenticate for each one. This directly addresses the goal of making the process less complex by eliminating the need for employees to manage and use three different sets of credentials for internal resources.

CFederation

Federation is a broader concept that enables SSO across organizational boundaries by establishing trust between multiple identity providers and service providers, but SSO is the more direct and specific solution for simplifying access to internal resources within a single organization.

DSecure token

A secure token is a component (e.g., a SAML assertion or JWT) used within an SSO or federation system to convey identity and authorization information, but it is not the overarching solution for the problem of multiple credentials itself.

Concept tested: Single sign-on (SSO) for credential simplification

Source: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-sso

Topics

#single sign-on#identity management#authentication#access management

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice