Back to Identity and Access Management

Federation

5 minutes 5 Questions

Federation is an identity and access management concept in which multiple organizations, systems, or applications cooperate to share and use the same user identities or authentication services. This concept allows users to access resources from different systems or organizations using a single iden…

Test mode:
Start practice test
CISSP - Federation Example Questions

Test your knowledge of Federation

Question 1

A system administrator is configuring federation to enable their employees to access a third-party service using their organization's credentials. However, the administrator wants to limit the personally identifiable information (PII) shared with the service. Which of the following SAML features should the administrator configure?

Correct Answer: Attribute filtering

Attribute filtering in SAML allows the administrator to control the sharing of PII with third-party services. The other options, such as encryption, authentication context, integrity checking, signature, and assertion, are important features of SAML but do not directly control the sharing of PII.

Question 2

A large hotel chain has implemented the use of federated identity management (FIM) to ease access when employees move between hotel locations. An employee has recently been promoted and needs immediate access to higher-level systems at their new location. What federation protocol should be configured to enable dynamic provisioning of identity attributes?

Correct Answer: System for Cross-domain Identity Management (SCIM)

SCIM enables dynamic provisioning of identity attributes, which allows for immediate access to higher-level systems when an employee's role changes. SAML, OIDC, OAuth 2.0, Kerberos, and LDAP are all authentication and authorization protocols, but they do not support dynamic provisioning like SCIM.

Question 3

A global organization has implemented a federated single sign-on (SSO) solution to manage access to various cloud-based applications. Several employees report that they cannot access one specific application. The IT team reviewed logs and discovered that the access tokens are expired. What should IT do to resolve this issue?

Correct Answer: Increase the token's lifetime

Increasing the token's lifetime will allow employees to access the application without frequent expirations. Decreasing the token's lifetime, switching federation protocols, removing the application, disabling SSO, or implementing multi-factor authentication will not address the root cause of the issue.

More Federation questions
12 questions (total)
Start 12 question test