MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What does Single Sign-On (SSO) allow a user to do?
   a. Use multiple IDs to log in to applications
   b. Use one set of credentials to access multiple applications
   c. Use guest accounts for limited access
   d. Share passwords between users
   Answer: b. Use one set of credentials to access multiple applicationsfortinet
2. Which entity in SSO is responsible for creating and managing user identities?
   a. Service Provider (SP)
   b. Identity Provider (IdP)
   c. Access Control List
   d. Firewall
   Answer: b. Identity Provider (IdP)fortinet
3. What is an authentication token in SSO?
   a. A type of password manager
   b. Digital information identifying a user stored in the browser or server
   c. A physical access card
   d. A virus detection tool
   Answer: b. Digital information identifying a user stored in the browser or serverfortinet
4. Which standard is most commonly used for writing authentication tokens in SSO?
   a. OAuth
   b. SAML (Security Assertion Markup Language)
   c. HTTPS
   d. LDAP
   Answer: b. SAML (Security Assertion Markup Language)fortinet
5. OAuth in SSO is mainly used for:
   a. User authentication
   b. User authorization
   c. Encryption of passwords
   d. Session timeout control
   Answer: b. User authorizationfortinet
6. What is the primary risk of using SSO in a network?
   a. Increased password fatigue
   b. Single point of failure if credentials are compromised
   c. Excessive login prompts
   d. Decentralized management
   Answer: b. Single point of failure if credentials are compromisedpretestsimulator
7. Which of the following is TRUE about SSO’s impact on user experience?
   a. Users must enter credentials multiple times per session
   b. Users experience reduced password fatigue
   c. SSO complicates the login process
   d. Users need multiple passwords for different applications
   Answer: b. Users experience reduced password fatiguefortinet
8. An attacker who steals SSO credentials can:
   a. Access only one application
   b. Access all linked applications
   c. Access only email accounts
   d. Cannot access any accounts without second factor
   Answer: b. Access all linked applicationspretestsimulator
9. What type of entity is the Service Provider (SP) in SSO?
   a. The system that manages user identities
   b. A vendor providing applications or services accessed through SSO
   c. The firewall protecting the network
   d. The hardware device used for login
   Answer: b. A vendor providing applications or services accessed through SSOfortinet
10. What is a common method SSO uses to verify user identity without storing passwords on each service?
    a. Password sharing
    b. Authentication tokens passed between SP and IdP
    c. Sending passwords via email
    d. Biometric scanning only
    Answer: b. Authentication tokens passed between SP and IdPfortinet
11. Which is NOT a benefit of implementing SSO?
    a. Improved security through reduced password reuse
    b. Centralized user identity management
    c. Increased password fatigue
    d. Streamlined user access to multiple systems
    Answer: c. Increased password fatiguefortinet
12. What happens when a user logs into one application with SSO during a session?
    a. They must log in again for each additional app
    b. They authenticate once for multiple applications during the session
    c. They lose access to previous apps
    d. They are logged out automatically after 5 minutes
    Answer: b. They authenticate once for multiple applications during the sessiontrustedinstitute
13. What is a potential consequence of a compromised SSO Identity Provider?
    a. Only one application is affected
    b. Multiple applications can be accessed by the attacker
    c. The network speed increases
    d. User accounts are locked immediately
    Answer: b. Multiple applications can be accessed by the attackerpretestsimulator
14. What is the main purpose of Security Assertion Markup Language (SAML) in SSO?
    a. To encrypt email messages
    b. To exchange authentication and authorization data securely
    c. To store user passwords
    d. To prevent network congestion
    Answer: b. To exchange authentication and authorization data securelyfortinet
15. Which of the following is an example of using OAuth in SSO?
    a. Using a Facebook account to log into a third-party app
    b. Typing a password directly into every app
    c. Manually creating multiple user accounts
    d. Logging out of all services simultaneously
    Answer: a. Using a Facebook account to log into a third-party appfortinet
16. What happens if a user’s SSO password is disclosed?
    a. Only one service is at risk
    b. All connected services using the SSO are at risk
    c. Passwords for other apps stay safe
    d. The user is forced to change all passwords
    Answer: b. All connected services using the SSO are at riskpretestsimulator
17. What is the role of a session token in SSO?
    a. Stores user authentication status during a session
    b. Encrypts user credentials on disk
    c. Tracks browser history
    d. Acts as a network firewall
    Answer: a. Stores user authentication status during a sessionfortinet
18. What type of vulnerability can affect SSO systems by allowing attackers to manipulate session identifiers?
    a. Session Fixation
    b. Phishing
    c. Denial of Service
    d. Man-in-the-middle
    Answer: a. Session Fixationexamradar
19. In SSO, what is the function of the Identity Provider (IdP)?
    a. Provides authentication services and verifies user credentials
    b. Offers internet access to users
    c. Hosts websites only
    d. Manages encryption keys exclusively
    Answer: a. Provides authentication services and verifies user credentialsfortinet
20. Which one is NOT a common protocol used to implement SSO?
    a. SAML
    b. OAuth
    c. LDAP
    d. FTP
    Answer: d. FTPsanfoundry+1
21. What is an advantage of SSO for IT administrators?
    a. Simplified user account management
    b. Increased password reset requests
    c. More complex login processes
    d. Loss of control over user access
    Answer: a. Simplified user account managementpretestsimulator
22. What is password fatigue in SSO context?
    a. When users remember all passwords perfectly
    b. When users struggle to manage multiple passwords
    c. When users invent complex passwords
    d. When passwords are never changed
    Answer: b. When users struggle to manage multiple passwordsfortinet
23. Which of the following best describes the “single point of failure” risk in SSO?
    a. Failure of network cables
    b. Failure of the centralized authentication server leading to loss of access
    c. Failure of multiple unrelated systems simultaneously
    d. Failure of password complexity rules
    Answer: b. Failure of the centralized authentication server leading to loss of accesspretestsimulator
24. What does OpenID provide in the context of SSO?
    a. A protocol for user authentication across multiple websites
    b. Firewall protection services
    c. Malware scanning
    d. Data storage capacity
    Answer: a. A protocol for user authentication across multiple websitessanfoundry
25. Which of the following is a complementary mechanism to OpenID used in SSO systems?
    a. CHAP
    b. SAML
    c. FTP
    d. Telnet
    Answer: b. SAMLsanfoundry
26. What happens in a typical SSO login process?
    a. User enters credentials once and receives an authentication token
    b. User enters credentials for every application
    c. System generates different passwords for each app
    d. User receives yearly password reset notifications
    Answer: a. User enters credentials once and receives an authentication tokenfortinet
27. How does SSO improve security beyond convenience?
    a. By requiring users to write down passwords
    b. By reducing password reuse and phishing risks
    c. By storing passwords in clear text
    d. By ignoring failed login attempts
    Answer: b. By reducing password reuse and phishing risksfortinet
28. Which type of attack involves redirecting users to malicious websites after SSO authentication?
    a. Open Redirect vulnerability
    b. Cross-site scripting (XSS)
    c. Brute force attack
    d. DDoS attack
    Answer: a. Open Redirect vulnerabilityexamradar
29. What is an example of SSO in everyday use?
    a. Using Google account to log in to multiple apps
    b. Creating new passwords for each social media site
    c. Logging out immediately after browsing
    d. Using guest accounts for access
    Answer: a. Using Google account to log in to multiple appsfortinet
30. What type of data does SSO NOT store?
    a. User login credentials at the service provider
    b. Authentication tokens
    c. User identity verification data at IdP
    d. Access permissions
    Answer: a. User login credentials at the service providerfortinet
31. Why do organizations prefer SSO for cloud services?
    a. It reduces administrative overhead and strengthens security
    b. It complicates user interaction
    c. It requires users to remember more passwords
    d. It avoids any need for encryption
    Answer: a. It reduces administrative overhead and strengthens securityfortinet
32. What does SSO typically require to integrate with applications?
    a. Implementation of a trust protocol between SP and IdP
    b. Manual password sharing between apps
    c. Installation of firewall appliances
    d. Physical security tokens for every login
    Answer: a. Implementation of a trust protocol between SP and IdPfortinet
33. Which of the following is NOT a common security control in SSO systems?
    a. Multi-factor authentication
    b. Password complexity enforcement
    c. Automatic session timeout
    d. Disabling all tokens
    Answer: d. Disabling all tokenstrustedinstitute
34. What is the role of encryption in SSO?
    a. Protect communication of authentication tokens and credentials
    b. Slow down user access for security
    c. Store plaintext passwords
    d. Share passwords between applications
    Answer: a. Protect communication of authentication tokens and credentialsfortinet
35. What is the role of access tokens in OAuth-based SSO?
    a. Authorize user access to resources without exposing credentials
    b. Encrypt user data
    c. Log out users after timeout
    d. Store user passwords
    Answer: a. Authorize user access to resources without exposing credentialsfortinet
36. Which of these is a disadvantage of SSO?
    a. Reduced risk of phishing
    b. Single point of failure risk
    c. Less administrative overhead
    d. Improved user experience
    Answer: b. Single point of failure riskpretestsimulator
37. In what format does SAML typically exchange information?
    a. XML
    b. JSON
    c. CSV
    d. TXT
    Answer: a. XMLfortinet
38. Which organization role is directly responsible for managing and verifying user identities in SSO?
    a. Identity Provider administrator
    b. End user
    c. Network technician
    d. Account auditor
    Answer: a. Identity Provider administratorfortinet
39. What does credential federation in SSO refer to?
    a. Using credentials from one domain to access resources in another domain
    b. Sharing passwords manually
    c. Multiple login prompts
    d. Physical ID badge use
    Answer: a. Using credentials from one domain to access resources in another domainfortinet
40. What security threat occurs if an attacker can reuse a valid session token in SSO?
    a. Session hijacking
    b. Data corruption
    c. Packet sniffing
    d. Denial of service
    Answer: a. Session hijackingexamradar
41. Which of the following helps mitigate risks associated with SSO?
    a. Multi-factor authentication (MFA)
    b. Writing passwords on paper
    c. Using simple passwords
    d. Disabling session tokens
    Answer: a. Multi-factor authentication (MFA)trustedinstitute
42. How does SSO impact help desk calls related to passwords?
    a. It typically reduces password reset requests
    b. It increases password complexity complaints
    c. It causes more forgotten password calls
    d. It has no effect on password help desk calls
    Answer: a. It typically reduces password reset requestsfortinet
43. What type of SSO architecture involves storing user credentials in a central database?
    a. Centralized authentication
    b. Distributed firewall
    c. Peer-to-peer network
    d. Token-less authentication
    Answer: a. Centralized authenticationfortinet
44. Which protocol allows SSO integration with cloud-based services?
    a. OAuth
    b. FTP
    c. SMTP
    d. Telnet
    Answer: a. OAuthfortinet
45. What happens if the Identity Provider service is down in an SSO environment?
    a. Users may lose access to all connected applications
    b. Users can log in as usual
    c. Passwords are reset automatically
    d. Only guest accounts are affected
    Answer: a. Users may lose access to all connected applicationspretestsimulator
46. How does SSO improve compliance for organizations?
    a. By centralizing authentication logs and control
    b. By increasing number of passwords used
    c. By disabling audits
    d. By eliminating need for security policies
    Answer: a. By centralizing authentication logs and controlfortinet
47. What is the role of the “relaying party” in OpenID associated SSO systems?
    a. Entity requesting authentication verification from an identity provider
    b. User account holder
    c. Firewall device
    d. Network switch
    Answer: a. Entity requesting authentication verification from an identity providersanfoundry
48. Which of the following is an example of a session management risk in SSO?
    a. Session fixation attack
    b. Email phishing
    c. SQL injection
    d. Password cracking
    Answer: a. Session fixation attackexamradar
49. How does SSO affect user productivity?
    a. Increases productivity by reducing login time
    b. Decreases productivity with slow logins
    c. Has no effect on user efficiency
    d. Requires manual password entry for each app
    Answer: a. Increases productivity by reducing login timetrustedinstitute
50. Which is a key characteristic of SSO systems?
    a. Single user authentication grants access to multiple applications
    b. Multiple user authentications required for each app
    c. No credential storage at centralized location
    d. Requires users to remember many passwords
    Answer: a. Single user authentication grants access to multiple applicationsfortinet

1. https://www.fortinet.com/resources/cyberglossary/single-sign-on
2. https://pretestsimulator.com/cisa/6-cisa-single-sign-on-sso-questions-answer-and-explanation
3. https://trustedinstitute.com/concept/cissp/identity-and-access-management/single-sign-on/
4. https://examradar.com/single-sign-on-sso-risks-in-session-management-mcqs/
5. https://www.sanfoundry.com/cloud-computing-questions-answers-identity-protocol-standards/
6. https://www.quizmantra.com/2023/01/sso-quiz-sso-questions-answers-sso.html
7. https://itexamanswers.net/networking-basics-my-knowledge-check-answers.html
8. https://www.techtarget.com/searchsecurity/feature/Authentication-quiz
9. https://www.gauthmath.com/solution/1802079612329989/play-fresco-me-course-1044-progress-topic-6280-content-34702-quiz-Question-Type-
10. https://www.sanfoundry.com/computer-network-questions-answers/
11. https://www.youtube.com/watch?v=11ElZybd1Dw
12. https://www.youtube.com/watch?v=v_7NmxWBOa8
13. https://testbook.com/objective-questions/mcq-on-networking–5eea6a1639140f30f369f551
14. https://www.scribd.com/document/553820157/Security-MCQ-1
15. https://itexamanswers.net/networking-basics-course-final-exam-answers.html
16. https://examradar.com/question/16387/What-is-Single-SignOn-SSO/
17. https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917
18. https://www.koenig-solutions.com/network-security-essentials-quiz-questions-answers
19. https://www.uninets.com/blog/computer-networks-mcq