2.4 Summarize authentication and authorization design concepts

Question 1

Directory Service

Answer 1

Similar to a database but is used for fast and efficient data retrieval

Question 2

LDAP

Answer 2

Lightweight Directory Access Protocol
The authentication, authorization, control for Active Directory.

Question 3

AWS Managed Microsoft AD

Answer 3

This is related to Microsoft Active Directory.

Question 4

Federation/Identity Federation

Answer 4

Management system for identifying and gaining access to multiple enterprises with one log in credential. Third party Credentials

Question 5

Attestation

Answer 5

Organization checking credentials that it was supplied.

Question 6

TOTP

Answer 6

Time-based One-Time Password
A password that is time

Question 7

HOTP

Answer 7

HMAC-based One-Time Password
A algorithm password that is authenticated with a server. (Hash password that can have credentials for a long time. Think of IG one time passwords.

Question 8

SMS (authentication)

Answer 8

Short Message Service
a Multifactor authentication by sending a verification to your phone.

Question 9

Token Key/Dynamic Key

Answer 9

Token Keys rely on something physical you have like a card that has pin code. Dynamic key is the same thing but changes.

Question 10

Static Codes

Answer 10

Codes that don’t change. Standard is that all static codes have crypto graphic protection.

Question 11

Authentication Application

Answer 11

A app such as “Google Authentication” that issues a one time password for user authentication

Question 12

Push Notifications

Answer 12

A notification will appear on the users devices and the user can deny or allow access from the notification.

Question 13

Phone Calls (Authentication)

Answer 13

You receive a phone call to authenticate.

Question 14

Smart Card Authentication

Answer 14

Card that has a chip (ICC) and within that ICC there is a long cryptographic token that cant be copied. Also there is pin associated with it.

Question 15

Biometrics

Answer 15

getting authentication through unique body parts on a human.
Two part process:
Enrollment: turning biological parts into numeric value, which the template
Authenticate: Numeric value validated by computer

Question 16

Fingerprint

Answer 16

using the finger print to authenticate by the patterns on a finger

Question 17

Retina

Answer 17

scanning the blood vessels in the eye for authentication

Question 18

Iris

Answer 18

Scanning the Pigmentation in the eye.
Issues: can be done at a distance without knowledge
the Iris can change due to medical conditions

Question 19

Facial

Answer 19

Forward facing camera scans your face
issues: someone can put your face up to the camera to unlock

Question 20

Voice

Answer 20

Voice recognition to authenticate.
Issues: FRR and FAR

Question 21

Vein

Answer 21

Scan vein patterns to authenticate.

Question 22

Gait Analysis

Answer 22

Identify how someone walks to authenticate. Can be used in crowds too.

Question 23

FAR

Answer 23

False Acceptance Rates
rate of false positives within a system.

Question 24

FRR

Answer 24

False Rejection Rate
False negatives within a system.

Question 25

CER

Answer 25

Crossover Error Rate
A balanced combination of FAR and FRR and ideal for systems.

Question 26

MFA

Answer 26

Multifactor Authentication and Attributes
Related to multiple/two way authentication.

Question 27

Factors

Answer 27

Things that compromise items of proof.

Question 28

Something you Know

Answer 28

Passwords, PIN, Patterns. ( in your brain)

Question 29

Something You Have

Answer 29

Security tokens, device, smart card (something physical)

Question 30

Something You Are

Answer 30

Biometrics (finger prints, Iris, Voice)

Question 31

Attributes Related to authentication.

Answer 31

Something you can do
Something you Exhibit
Something You know

Focus on the elements associated with the user

Question 32

AAA

Answer 32

Authentication, Authorization, and Accounting.

the three make up the AAA framework for security

Question 33

Somewhere you are

Answer 33

Authentication based on location.