Home / CompTIA / SY0-701

Question list

List of questions

Question 1

(5)

Which of the following threat actors is the most likely to be hired by a foreign government to attack critical systems located in other countries?

Question 2

(5)

Which of the following is used to add extra complexity before using a one-way data transformation algorithm?

Question 3

(3)

Which of the following has been implemented when a host-based firewall on a legacy Linux system allows connections from only specific internal IP addresses?

Question 4

(3)

The management team notices that new accounts that are set up manually do not always have correct access or permissions. Which of the following automation techniques should a systems administrator

Question 5

(5)

Which of the following involves an attempt to take advantage of database misconfigurations?

Question 6

(4)

An organization would like to store customer data on a separate part of the network that is not accessible to users on the main corporate network. Which of the following should the administrator use

Question 7

(1)

Which of the following is used to quantitatively measure the criticality of a vulnerability?

Question 8

(4)

A technician is opening ports on a firewall for a new system being deployed and supported by a SaaS provider. Which of the following is a risk in the new system?

Question 9

(4)

Which of the following security concepts is the best reason for permissions on a human resources fileshare to follow the principle of least privilege?

Question 10

(4)

A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis. Which of the following types of controls is the company setting up?

Question 24 - SY0-701 discussion

A data administrator is configuring authentication for a SaaS application and would like to reduce the number of credentials employees need to maintain. The company prefers to use domain credentials to access new SaaS applications. Which of the following methods would allow this functionality?

SSO

LEAP

MFA

PEAP

Suggested answer: A

Explanation:

SSO stands forsingle sign-on, which is a method of authentication that allows users to access multiple applications or services with one set of credentials. SSO reduces the number of credentials employees need to maintain and simplifies the login process. SSO can also improve security by reducing the risk of password reuse, phishing, and credential theft. SSO can be implemented using various protocols, such as SAML, OAuth, OpenID Connect, and Kerberos, that enable the exchange of authentication information between different domains or systems.SSO is commonly used for accessing SaaS applications, such as Office 365, Google Workspace, Salesforce, and others, using domain credentials123.

B) LEAP stands forLightweight Extensible Authentication Protocol, which is a Cisco proprietary protocol that provides authentication for wireless networks.LEAP is not related to SaaS applications or domain credentials4.

C) MFA stands formulti-factor authentication, which is a method of authentication that requires users to provide two or more pieces of evidence to prove their identity. MFA can enhance security by adding an extra layer of protection beyond passwords, such as tokens, biometrics, or codes. MFA is not related to SaaS applications or domain credentials, but it can be used in conjunction with SSO.

D) PEAP stands forProtected Extensible Authentication Protocol, which is a protocol that provides secure authentication for wireless networks. PEAP uses TLS to create an encrypted tunnel between the client and the server, and then uses another authentication method, such as MS-CHAPv2 or EAP-GTC, to verify the user's identity. PEAP is not related to SaaS applications or domain credentials.

Reference=1:Security+ (SY0-701) Certification Study Guide | CompTIA IT Certifications2: What is Single Sign-On (SSO)?- Definition from WhatIs.com3: Single sign-on - Wikipedia4: Lightweight Extensible Authentication Protocol - Wikipedia : What is Multi-Factor Authentication (MFA)? - Definition from WhatIs.com : Protected Extensible Authentication Protocol - Wikipedia

Show Answer

asked 02/10/2024

Rajeev R Kumar

36 questions

Your answer: A B C D

4 comments

Sorted by

Fabio Valenti

Edited 19 days ago

Voted A

With SSO, the company can integrate domain credentials into the authentication process for SaaS applications, streamlining user access and improving security by centralizing authentication. A right

Charly Ndedi Priso

Edited 19 days ago

Voted A

Choose A

Aamer Shahzad

Edited 19 days ago

Voted A

Ans A

Ghalem benhameurlaine

Edited 19 days ago

Voted A

A. SSO. Single Sign-On (SSO) is an authentication scheme that enables users to access multiple applications with one set of login credentials

Question list

List of questions

Question 1

(5)

Question 2

(5)

Question 3

(3)

Question 4

(3)

Question 5

(5)

Question 6

(4)

Question 7

(1)

Question 8

(4)

Question 9

(4)

Question 10

(4)

Related questions

Question 24 - SY0-701 discussion

Suggested answer: A

4 comments