CompTIA Security+ (SY0-601) — Question 496

During the onboarding process, an employee needs to create a password for an intranet account. The password must include ten characters, numbers, and letters, and two special characters. Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet profile. Which of the following access management concepts is the company most likely using to safeguard intranet accounts and grant access to multiple sites based on a user's intranet account? (Choose two.)

Answer options

• A. Federation
• B. Identity proofing
• C. Password complexity
• D. Default password changes
• E. Password manager
• F. Open authentication

Correct answer: A, C

Explanation

The correct answers are A and C. Federation allows for the use of a single account to access multiple services, which is relevant here, while password complexity pertains to the requirements for creating a strong password, which is also a focus in this scenario. Options B, D, E, and F do not directly address the access management concepts being utilized in conjunction with the intranet account and its associated access control.