Exam SY0-701 topic 1 question 140 discussion

Actual exam question from CompTIA's SY0-701

Question #: 140
Topic #: 1

During the onboarding process, an employee needs to create a password for an intranet account. The password must include ten characters, numbers, and letters, and two special characters. Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet profile. Which of the following access management concepts is the company most likely using to safeguard intranet accounts and grant access to multiple sites based on a user's intranet account? (Choose two.)

A. Federation
B. Identity proofing
C. Password complexity
D. Default password changes
E. Password manager
F. Open authentication

Show Suggested Answer

Suggested Answer: AC 🗳️

by 35f7aac at June 1, 2024, 7:32 p.m.

Comments

Submit Cancel

dbrowndiver

Highly Voted 9 months, 1 week ago

Selected Answer: AC

"A". Federation and "C". are the correct answers. Federation facilitates access to multiple systems using a single intranet profile, and password complexity ensures that the passwords used are strong and secure. These concepts work together to safeguard intranet accounts and streamline user access across various company-owned websites.

upvoted 7 times

...

TheMichael

Most Recent 9 months, 3 weeks ago

Selected Answer: AC

Answer: A and C Federation establishes trust with a third-party that manages authentication, potentially providing a more secure solution for internal company systems. In this scenario the company is the third party that grants access to other company-owned websites. The answer is not Open authentication because Open authentication allows you to log into any other company-owned websites with your password, not intranet profile. Open authentication is less secure so a company would be less likely to use it in this fashion which also makes A and C make more sense.

upvoted 4 times

...

NoobusAurelius

9 months, 3 weeks ago

I agree with NadirM_18 C and F makes sense because it only states Company owned websites, not company systems/apps.

upvoted 2 times

...

NadirM_18

10 months ago

Seems like this could be CF as this is within the same company.

upvoted 1 times

NadirM_18

9 months, 2 weeks ago

The key difference between SSO and FIM is while SSO is designed to authenticate a single credential across various systems within one organization, federated identity management systems offer single access to a number of applications across various enterprises.

upvoted 1 times

...

c80f5c5

11 months, 1 week ago

This one is tricky because federation and open auth are very similar. I think OAuth might be for third party applications (like signing into a game with your facebook account) and not multiple company owned platforms like the question asks

upvoted 3 times

35f7aac

11 months, 1 week ago

I guess what makes me thing OAuth is because OAuth supports SSO which is what I think is being hinted at here. I wish this question was worded better.

upvoted 2 times

35f7aac

11 months, 1 week ago

OK. I'm going to change to Federation because i just found this on Okta's site. "SAML is independent of OAuth, relying on an exchange of messages to authenticate in XML SAML format, as opposed to JWT. It is more commonly used to help enterprise users sign in to multiple applications using a single login."

upvoted 1 times

...

35f7aac

11 months, 2 weeks ago

Hmm. Why not F instead of A? Question says "other company-owned websites". I thought Federation applies more to independent organizations connecting together.

upvoted 3 times

...