SSCP Certification SSCP Identity and Access Management 2

Question 1

What is the main security benefit of implementing Single Sign-On (SSO) in an enterprise environment?

Accepted Answer

Reduces attack surface by centralizing authentication

Answer

SSO centralizes authentication to a single trusted identity provider, reducing the number of credential stores and attack vectors across the environment.

Question 2

Which of the following best describes a federated identity system?

Accepted Answer

Multiple organizations sharing identity assertions across trust boundaries

Answer

Federated identity allows separate organizations to trust and share identity information, enabling users to authenticate once and access resources across organizational boundaries.

Question 3

What does the term 'account harvesting' refer to in identity security?

Accepted Answer

Collecting valid usernames for use in attacks

Answer

Account harvesting is the technique attackers use to enumerate valid usernames from a system, which can then be targeted in brute-force or credential stuffing attacks.

Question 4

Which protocol is most commonly used for federated authentication across web applications and cloud services?

Accepted Answer

SAML

Answer

Security Assertion Markup Language (SAML) is the widely adopted XML-based standard for exchanging authentication and authorization data between identity providers and service providers.

Question 5

In IAM, what is 'role explosion'?

Accepted Answer

An excessive proliferation of roles making management unmanageable

Answer

Role explosion occurs when an RBAC implementation creates so many granular roles that management becomes complex, often leading to inconsistent permissions and audit failures.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Identity and Access Management 2