MENU
Your API generates tokens to authenticate users. You have the following requirements
1. Limited token lifetime.
2. Managed key rotation.
3. Self-verifiable content.
4 Compact data representation
5. Refresh without new challenge.
You plan to use SAML2 Which two of the above-listed requirements are satisfied by using SAML2? Choose 2 answers
Suggested Answer: A
Get Premium Google Cloud - Apigee Certified API Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
24 comments · newest first
RU
Rutha
2 days ago
D is less relevant. A and B seem solid to me.
BE
Benedict
8 days ago
I’m not so sure about C. What about D?
KI
Kizzy
13 days ago
I agree, A is definitely satisfied. C makes sense too.
DO
Doretha
18 days ago
This question is tricky! I think A and C are correct.
AN
Antonio
23 days ago
A and C make sense. SAML2 is all about security and verification!
LE
Lelia
28 days ago
I’m leaning towards A and E. Refreshing without a new challenge is useful.
BR
Brittni
1 month ago
I feel like C is more relevant than B. Self-verifiable content is crucial.
DA
Daniel
1 month ago
But what about B? Managed key rotation seems important too.
CH
Chun
1 month ago
I agree, A is definitely right. Limited token lifetime is key.
AJ
Aja
2 months ago
This question is tricky! I think A and C are the answers.
AB
Abraham
2 months ago
D) Compact data representation is a stretch for SAML2, not sure about that one.
MA
Markus
2 months ago
Wait, SAML2 does self-verification? That's surprising!
BE
Ben
2 months ago
I think B) Managed key rotation might not be fully covered though.
GE
Genevive
2 months ago
Totally agree with that! SAML2 handles those well.
CU
Curt
2 months ago
A) Limited token lifetime and C) Self-verifiable content are satisfied by SAML2.
TI
Tina
3 months ago
I thought SAML2 needed a new challenge for refresh, but I guess not!
BR
Brittney
3 months ago
Compact data representation isn't really a strong suit for SAML2.
ET
Ettie
3 months ago
Wait, can SAML2 really handle key rotation effectively?
RO
Rodolfo
3 months ago
Totally agree with that!
AR
Arminda
3 months ago
A) Limited token lifetime and C) Self-verifiable content are covered by SAML2.
PE
Peggie
4 months ago
I practiced a similar question, and I recall that SAML2 tokens can be quite large, so I'm not sure about compact data representation being satisfied.
TE
Terrilyn
4 months ago
I think SAML2 provides self-verifiable content because it uses XML signatures, so option C could be correct too.
JA
Jarod
4 months ago
I'm not entirely sure about key rotation with SAML2. I feel like it might not handle that as well as other protocols.
OD
Odette
5 months ago
I remember that SAML2 does support limited token lifetimes, so I think option A is definitely one of the answers.