Access Controls →hardMultiple SelectObjective-mapped

SSCP Access Controls Practice Question

A security engineer is designing a federated identity solution for cross-domain authentication. Which THREE of the following technologies are commonly used?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

OpenID Connect (OIDC)

Federated identity relies on standards like SAML, OAuth/OIDC, and Active Directory forest trusts to enable authentication across domains.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Kerberos
Why it's wrong here
Kerberos is typically used within a single domain, not for federation across domains, unless extended by trust relationships.
✗
Lightweight Directory Access Protocol (LDAP)
Why it's wrong here
LDAP is a directory access protocol, not a federation technology.
✓
OpenID Connect (OIDC)
Why this is correct
OIDC is an authentication layer on top of OAuth 2.0 for federated identity.
✓
Security Assertion Markup Language (SAML)
Why this is correct
SAML is a standard for exchanging authentication and authorization data between IdP and SP.
✓
Active Directory forest trusts
Why this is correct
Forest trusts enable cross-domain authentication between Active Directory forests.

Go deeper

SSCP Access Controls Practice Question

Why each option matters

Option-by-option breakdown

Related to this question