CISSP Identity and Access Management Practice Question
A security architect is designing a Single Sign-On (SSO) solution for a web application that needs to support authentication and authorization. Which TWO of the following protocols are best suited for this purpose? (Select TWO)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
OpenID Connect (OIDC)
SAML 2.0 and OpenID Connect (OIDC) are both SSO protocols that provide authentication and authorization. OAuth 2.0 alone provides only authorization.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Kerberos
Why it's wrong here
Kerberos is a network authentication protocol, not typically used for web SSO.
- ✗
LDAP
Why it's wrong here
LDAP is a directory access protocol, not an SSO protocol.
- ✓
OpenID Connect (OIDC)
Why this is correct
OIDC adds authentication to OAuth 2.0.
- ✓
SAML 2.0
Why this is correct
SAML supports both authentication and authorization for SSO.
- ✗
OAuth 2.0
Why it's wrong here
OAuth 2.0 is an authorization framework, not authentication.
Go deeper
Related to this question
Learn chapter
Security Governance and Principles
Key term
Access token
A digital key that a computer system gives you to prove your identity and grant you permission to access specific resources or perform actions.
Key term
Authorization
Authorization determines what an authenticated user is allowed to do within a system, such as accessing files, running programs, or changing settings.
About these practice questions
This CISSP question is part of Courseiva's 747-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.