Exam SY0-501 topic 1 question 933 discussion

Actual exam question from CompTIA's SY0-501

Question #: 933
Topic #: 1

The Chief Security Officer (CSO) at a major hospital wants to implement SSO to help improve security in the environment and protect patient data, particularly at shared terminals. The Chief Risk Officer (CRO) is concerned that training and guidance have not been provided to frontline staff, and a risk analysis has not been performed. Which of the following is the MOST likely cause of the CRO's concerns?

A. SSO would simplify username and password management, making it easier for hackers to guess accounts.
B. SSO would reduce password fatigue, but staff would still need to remember more complex passwords.
C. SSO would reduce the password complexity for frontline staff.
D. SSO would reduce the resilience and availability of systems if the identity provider goes offline.

Show Suggested Answer

Suggested Answer: D 🗳️

by Eyecandyyy at June 23, 2021, 6:14 p.m.

Comments

Submit Cancel

fonka

3 years, 11 months ago

SSO works based upon a trust relationship set up between an application, known as the service provider, and an identity provider, like OneLogin. This trust relationship is often based upon a certificate that is exchanged between the identity provider and the service provider. This certificate can be used to sign identity information that is being sent from the identity provider to the service provider so that the service provider knows it is coming from a trusted source. In SSO, this identity data takes the form of tokens which contain identifying bits of information about the user like a user’s email address or a username.

upvoted 1 times

...

Eyecandyyy

4 years ago

Why not A?

upvoted 2 times

...