Lesson 5-AM Session Mobility Mobility

Identity services provide credentials that can be registered with an ACS that allows users to authenticate directly with an ACS and receive a token for accessing the ACS.  An example of an ACS is Microsoft Azure.

• True

• False

A __________ service stores, organizes and provides access to information in a directory. It is used for locating, managing, administering and organizing common items and network resources.

Which of the following AD FS components refers to a statement made by a trusted entity about an object that includes key information identifying the object.

• Claims Rules

• Attribute Store

• Claims

• Claims provider trust

This is a computer network authentication protocol that allows a host to prove their identity over a non-secure network in a secure manner.

• LDAP

• Kerberos

• SSO

AD FS is deployed onsite and provides SSO for applications and services that reside onsite or in Microsoft Azure.

• True

• False

_________ trust relationship defines how each partner defines what resources are accessible to the other organization and how access to the resources is enabled.

Azure AD provides identity management and access control capabilities for your cloud applications. Which is not a web-based authentication protocol used by Azure AD?

• OAuth 2.0                       

• LDAP

• Web Service Federation  

• SMAL 2.0

Federation services enables SSO by

• Creating unique username and passwords for each applications

• Using one set of credentials across different systems

• Encrypting data transferred between applications

• Isolating user sessions for security

What does it mean to use your Microsoft account to provide a consistent experience when working with the Windows Store?

• Purchased apps will be available from each devices

• Feeds will be synched across all devices.

• State information will be maintained.

• All of the above

This protocol is an application protocol for querying and modifying data using directory services running over TCP/IP.

• SSO

• Kerberos

• LDAP