SE Identity and Access Management 2

Question 1

Which federation protocol is most commonly used for SSO between web applications using XML-based assertions?

Accepted Answer

SAML 2.0

Answer

OAuth 2.0

Answer

OpenID Connect

Answer

Kerberos

Question 2

What is the difference between authentication and authorization?

Accepted Answer

Authentication verifies identity; authorization determines what the identity is permitted to do

Answer

They are the same concept

Answer

Authorization verifies identity; authentication grants access

Answer

Authentication encrypts data; authorization decrypts it

Question 3

Which Kerberos component issues Ticket Granting Tickets (TGTs) after initial user authentication?

Accepted Answer

Key Distribution Center (KDC) / Authentication Server (AS)

Answer

Service Principal

Answer

Ticket Granting Server (TGS)

Answer

Service Ticket

Question 4

A security engineer reviews access logs and finds a service account with domain admin rights that hasn't logged in for 180 days. What is the recommended action?

Accepted Answer

Immediately disable and review the account's necessity and permissions

Answer

Leave it; service accounts need broad rights

Answer

Reset the password only

Answer

Move it to a different OU

Question 5

Which access control model uses security labels and clearance levels to make access decisions, typically in government systems?

Accepted Answer

Mandatory Access Control (MAC)

Answer

RBAC

Answer

DAC

Answer

ABAC

Question 6

What is the purpose of a Privileged Access Workstation (PAW)?

Accepted Answer

Provide a hardened, dedicated workstation for performing privileged administrative tasks

Answer

Enable remote desktop for all users

Answer

Replace VPN for remote access

Answer

Automate patch management