Authentication and Authorization

What is the primary benefit of Single Sign-On (SSO)?

• Users need to remember multiple passwords

• Users can access multiple applications with one authentication

• It eliminates authentication entirely

• It replaces all security mechanisms

Which protocol is commonly used for implementing SSO?

• SMTP

• SAML

• FTP

• ICMP

In an enterprise setting, SSO helps improve:

• User experience and security

• Server performance only

• Authentication speed but not security

• Eliminating passwords completely

What is the role of an Identity Provider (IdP) in SSO?

• Verifies the user’s identity and provides authentication tokens

• Stores user passwords

• Manages firewall rules

• Hosts the website content

Which of the following is an example of an SSO system?

• Google Workspace login

• VPN access

• Private key encryption

• File transfer protocol

What does SAML stand for?

• Security Assertion Markup Language

• Secure Access Markup Language

• Service Authentication Markup Language

• System Authorization Markup Language

What does the acronym SAML stand for?

• Secure Access Management Layer

• Security Assertion Markup Language

• Single Authentication Management Language

• Server Authorization Middleware Layer

In SAML authentication, what does the Service Provider (SP) do?

• Stores user credentials

• Hosts the authentication mechanism

• Relies on the Identity Provider for authentication

• Generates access tokens

What type of data does a SAML assertion contain?

• User authentication and authorization details

• Encrypted passwords

• IP addresses of users

• Firewall policies

How does OAuth differ from SAML?

• A) OAuth is used for authorization, while SAML is used for authentication

• B) OAuth is for internal networks only

• C) OAuth requires biometric verification

• D) SAML is only for web applications