CISSP – Information Systems Security Architecture Professional (ISSAP) — Question 93

Which of the following password authentication schemes enables a user with a domain account to log on to a network once, using a password or smart card, and to gain access to multiple computers in the domain without being prompted to log in again?

Answer options

• A. Single Sign-On
• B. One-time password
• C. Dynamic
• D. Kerberos

Correct answer: A

Explanation

Single Sign-On (SSO) is designed to allow users to authenticate once and gain access to multiple resources without re-entering credentials, making it the correct answer. One-time password systems require a new password for each session, while dynamic and Kerberos methods involve different authentication processes that do not allow the same seamless access across multiple systems.