3.7 Given a Scenario, Implement Identity and Account Management Controls

Question 1

IAM

Answer 1

Identity and access management is combination of authentication and authorization into a single solution.

Question 2

Identity implemented as a controls

Answer 2

Identity is the first step in AAA (authentication, authorization, accounting)

Question 3

IdP

Answer 3

Identity provider- is a system that manages and creates identities within a internal network, CSP, Directory, or third party.

Provides SSO solutions for intranet.

Question 4

Attributes in Identity control

Answer 4

Attributes are specific characteristic that belong to a entity (person, Corp, or business.)

Question 5

Certificates

Answer 5

mechanism for verifying the identity of devices, systems, services, applications, networks, and organizations

Question 6

Tokens

Answer 6

a digital file that is issued to a person or device when successful log in.

Question 7

SSH Keys

Answer 7

Used in a SSH session setup to identify the client.

Question 8

Account Types

Answer 8

User Account
Shared Account
Guest Account
Service Account

Question 9

User Account

Answer 9

User Account is a standard account that every user has.
Some User Accounts have more rights such as System Admin.

Question 10

Shared Accounts

Answer 10

A public account such as a Kiosks that everyone has access too.

Question 11

Guest Account

Answer 11

Guest Account are account that have very limited privileges.
Guest account should have some way to identify who the guest account be longs too.

Question 12

Service Accounts

Answer 12

Service accounts are accounts that have very acute privileges for test a applications.

Question 13

Account Polices

Answer 13

Polices that explain the security standard for organization.

Question 14

Password Policy

Answer 14

Password policy enforces rules that a user follows when creating passwords. (Length, minimum, age, complexity)

Question 15

Password History in correlation to Policy

Answer 15

Previous passwords are archived so that the same password wont be used.

Question 16

Time-Based Logins

Answer 16

Logs out a user when time has expired on a user accounts.

Question 17

Access Polices

Answer 17

Defines what access is granted over a object or asset. Focuses on the users job description.

Question 18

Account Audits

Answer 18

Checking the activity of a account

Question 19

Disablement

Answer 19

Account Admin disables a account either by setting a expiration date or manually disabling it