Certified Information Systems Security Professional (CISSP) — Question 468

Which of the following BEST describes centralized identity management?

Answer options

• A. Service providers perform as both the credential and identity provider (IdP).
• B. Service providers identify an entity by behavior analysis versus an identification factor.
• C. Service providers agree to integrate identity system recognition across organizational boundaries.
• D. Service providers rely on a trusted third party (TTP) to provide requestors with both credentials and identifiers.

Correct answer: D

Explanation

The correct answer is D because centralized identity management relies on a trusted third party to manage credentials and identifiers, ensuring a unified approach. Options A and B do not accurately reflect centralized identity management principles, and option C describes integration but lacks the aspect of credential management.