Week 2 Module1

Question 1

A _____ is an established relationship between two or more entities. (2 domains or organizations for example)

Answer 1

Federation

Question 2

The producer in a Federation (that provides identity information)is called what?

A. Federation Provider
B. User Provider
C. Identity Provider
D. None of the above

Answer 2

C. Identity Provider

IdP

Question 3

The _______ receives assertions from the IdP and makes access control decisions based on the information in the assertions.

Answer 3

Relying Party (RP)

Question 4

True/False: The purpose of a federation is to create trust between organizations about digital identities, identity attributes and credentials.

Answer 4

True

Question 5

What are the 3 primary entities in a Federation?

A. Identity Provider
B. Subscriber
C. Response Party
D. Relying Party
E. Identifier

Answer 5

A. Identity Provider
B. Subscriber
D. Relying Party

Question 6

True/False: Authentication between an IdP and subscriber is a single authentication event.

Answer 6

False.

Question 7

Browser cookies, OAuth Tokens and Device Identification can be used to manage and setup what (in Identity Federation)?

Answer 7

A Session

Question 8

The main objective os an assertion is to enable the ____ to convey authentication event information to the ____.

Answer 8

IdP (Identity Provider)

RP (Relying party)

Question 9

In _____ channel presentation, the assertion goes through the subscriber.

Answer 9

Front

Question 10

In ____ channel presentation, the assertion is done through a direct connection between the IdP and RP.

Answer 10

Back

Question 11

The ____ channel presentation shall be single use and limited for use by a single RP.

Answer 11

Back

Question 12

Match the Federation Assurance Levels (FAL) to their technical requirements.

1. FAL1
2. FAL2
3. FAL3

A. Adds that the subscriber must present proof of possession of a cryptographic key
B. Requires the assertion be signed using cryptography
C. Adds that the assertion be encrypted

Answer 12

1. FAL1 B
2. FAL2 C
3. FAL3 A

Question 13

A ________ is an entity used to establish working relationships between parties, and performs some level of vetting to verify compliance with predetermined security, integrity and privacy standards.

A. Federation Authority
B. Vetting Authority
C. Security Authority
D. Authentication Authority

Answer 13

A. Federation Authority

Question 14

______ is an internet-scale federated identity and authenticatin protocol build on top of Oauth 2.0 and the JSON Object Signing and Encryption (JOSE) crypto system.

A. OAuth Connect
B. Internet Connect
C. OpenID Connect
D. JSON Connect

Answer 14

C. OpenID Connect

Question 15

In OpenID Connect, the RP is known as the ______.

Answer 15

Client