SY0-501 · Question #500
An organization's employees currently use three different sets of credentials to access multiple internal resources. Management wants to make this process less complex. Which of the following would…
The correct answer is B. Single sign-on. To reduce the complexity of employees using multiple credentials for various internal resources, single sign-on is the most effective solution.
Question
An organization's employees currently use three different sets of credentials to access multiple internal resources. Management wants to make this process less complex. Which of the following would be the BEST option to meet this goal?
Options
- ATransitive trust
- BSingle sign-on
- CFederation
- DSecure token
How the community answered
(40 responses)- A5% (2)
- B83% (33)
- C10% (4)
- D3% (1)
Why each option
To reduce the complexity of employees using multiple credentials for various internal resources, single sign-on is the most effective solution.
Transitive trust is a concept in directory services (like Active Directory) where a trust relationship between two domains can extend to other domains in a forest, but it does not directly solve the user-facing problem of managing multiple credentials for multiple applications.
Single sign-on (SSO) allows users to authenticate once with a single set of credentials and then gain access to multiple independent software systems without needing to re-authenticate for each one. This directly addresses the goal of making the process less complex by eliminating the need for employees to manage and use three different sets of credentials for internal resources.
Federation is a broader concept that enables SSO across organizational boundaries by establishing trust between multiple identity providers and service providers, but SSO is the more direct and specific solution for simplifying access to internal resources within a single organization.
A secure token is a component (e.g., a SAML assertion or JWT) used within an SSO or federation system to convey identity and authorization information, but it is not the overarching solution for the problem of multiple credentials itself.
Concept tested: Single sign-on (SSO) for credential simplification
Source: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-sso
Topics
Community Discussion
No community discussion yet for this question.