CIAM Authentication Methods 2

Question 1

Which authentication protocol uses security assertions in XML format to exchange authentication and authorization data between an identity provider and a service provider?

Accepted Answer

SAML 2.0

Answer

SAML 2.0 (Security Assertion Markup Language) uses XML-based assertions to convey authentication and authorization information between identity providers and service providers.

Question 2

What is the primary purpose of a TOTP (Time-based One-Time Password) in multi-factor authentication?

Accepted Answer

To generate a short-lived code synchronized with a time clock

Answer

TOTP generates a numeric code derived from a shared secret and the current time, typically valid for 30 seconds, adding a time-sensitive second factor.

Question 3

In certificate-based authentication, what cryptographic artifact does the client present to prove identity?

Accepted Answer

A digital certificate containing the client's public key

Answer

Certificate-based authentication requires the client to present a digital certificate (e.g., X.509) containing its public key, signed by a trusted Certificate Authority.

Question 4

An organization wants to allow users to log in with their corporate credentials on a third-party SaaS application without sharing passwords. Which federation approach is most appropriate?

Accepted Answer

SAML-based SSO

Answer

SAML-based SSO enables federated identity so users authenticate at the corporate IdP and the SaaS SP accepts the assertion, never receiving the user's password.

Question 5

What differentiates step-up authentication from standard MFA?

Accepted Answer

Step-up authentication triggers additional factors when elevated risk or privilege is detected

Answer

Step-up authentication dynamically requires additional verification factors when a user attempts a higher-risk action or accesses sensitive resources during an existing session.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Authentication Methods 2