SY0-701 Question 140

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose BC1

  I'm going with B. Identity Proofing and C. Password Complexity. The question is "Which of the following "access management concepts" is the company most likely using to "safeguard intranet accounts" and "grant access to multiple sites based on a user's intranet account"" Access Management is Domain 4, 4.6, and one of the objectives of the domain is "Password Concepts" - "Password best practices." The Domain 4.6 also covers SSO with Open Authorization (OAuth). Federation GRANTS access to External Websites, not intranet/company-owned websites. External websites such as Microsoft, Google, etc., using the user's company email/username and password. Remember, Federation EXTENDS SSO.

• 1

  Actually, B is the incorrect answer. Identity Proofing is to Authenticate the user using personal information. For example, the user calls the Help Desk to get their account unlocked or to reset their password. Help Desk should authenticate the user/verify it is them. I'll choose C. and F.

• Chose AB2

  Federation allows a user to create one identity, using that identity to access multiple sites, and log in across different systems using the same trusted identity provider these lines up with " Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet." (B.) Identity Proofing: this is the process of verifying the user is who they claim to be before the identity is trusted. It cant be password complexity because this is a requirement not an access management concept. The question is asking for two CONCEPTS that SAFEGUARD accounts and enable multi-site access, complexity alone doesn't do that.