CISSP Practice Question: In a financial services firm, what would MOST likely occur if Single…

Correct Answer: A. Increased risk of unauthorized data access

Explanation (CISSP Manager Logic):

SSO creates a single point of failure where configuration errors can grant broad access across multiple integrated systems. From a risk management perspective, any flaw in the trust relationship or token handling directly compromises the confidentiality of the firm's data assets.

By [properly configuring SSO], you:

• Mitigate the risk of a single credential compromise affecting multiple platforms.
• Ensure the integrity of the identity federation chain.
• Protect high-value financial data from unauthorized exposure.

While the other options are relevant, they fall short because:

• B: Productivity gains are secondary operational benefits that are negated if the security architecture is compromised.
• C: Improper configuration increases administrative and incident response overhead, offsetting any password management savings.
• D: Misconfiguration leads to audit failures and regulatory penalties rather than enhanced compliance.

Think like a manager:

Security must always precede convenience; managers must ensure that technical efficiencies do not inadvertently expand the attack surface or weaken the organization's risk posture.