CompTIA CySA+ (CS0-003) — Question 115

Which of the following does "federation" most likely refer to within the context of identity and access management?

Answer options

• A. Facilitating groups of users in a similar function or profile to system access that requires elevated or conditional access
• B. An authentication mechanism that allows a user to utilize one set of credentials to access multiple domains
• C. Utilizing a combination of what you know who you are, and what you have to grant authentication to a user
• D. Correlating one's identity with the attributes and associated applications the user has access to

Correct answer: B

Explanation

The correct answer is B, as federation allows users to use one set of credentials across multiple domains, streamlining access. Option A refers to role-based access control rather than federation, while option C describes multifactor authentication, and option D is related to identity management but does not capture the essence of federation.