Certified Information Systems Security Professional (CISSP) — Question 164

Which of the following is a major component of the federated identity management (FIM) implementation model and used to establish a network between dozens of organizations?

Answer options

• A. Identity as a Service (IDaaS)
• B. Attribute-based access control (ABAC)
• C. Cross-certification
• D. Trusted third party (TTP)

Correct answer: D

Explanation

The correct answer is D, as a Trusted Third Party (TTP) plays a crucial role in establishing trust and communication between different organizations in a federated identity management setup. Options A and B refer to services and access control methods that do not specifically address the networking aspect, while C, Cross-certification, is a method for validating identities but does not function as a comprehensive networking solution.