4.1 Compare and contrast identity and access management concepts.

Question 1

What is the concept of uniquely naming and referencing each individual user, program, and system component?

Answer 1

Identity

Question 2

Identification

Answer 2

The assertion or claiming of an identity

Question 3

Authentication

Answer 3

The act of proving or verifying the claimed identity

Question 4

Authorization

Answer 4

The mechanism that controls what a subject can or can’t do with their access.

Question 5

Accounting

Answer 5

A record that is preserved of who accessed the network, what resources they accessed, and when they disconnected from the network.

Question 6

Multifactor Authentication

Answer 6

The requirement that a user must provide two or more authentication factors in order to prove their identity.

Question 7

Federation or Federated Identity

Answer 7

a means of linking a subject’s accounts from several sites, services, or entities in to a single account. SAML

Question 8

Single Sign-On (SSO)

Answer 8

means that once a user is authenticated into the domain or network, they don’t need to reauthenticate to access resources on any domain or network entity.

Question 9

Number 1 multifactor authentication in the world is

Answer 9

CAC and PIN

Question 10

type 1 authentication

Answer 10

Something you know (PIN/Password)

Question 11

type 2 authentication

Answer 11

Something you have (CAC/Token)

Question 12

type 3 authentication

Answer 12

Something you are (Fingerprint/Iris)

Question 13

Something you do

Answer 13

An action you take (How you sign your signature)

Question 14

Somewhere you are

Answer 14

(Geo-location) Where you are located physically

Question 15

Kerberos

Answer 15

SSO for remote access.

Question 16

4 ways of doing SSO over the web?

Answer 16

SAML
Shibboleth
OpenID Connect
OAuth

Question 17

Security Assertion Markup Language

Answer 17

SAML-SSO on the Web-based on XML

Question 18

If you have a smart card that contains details of your iris coloring and retinal patterns, which two types of authentication would be involved in a successful access request?

A. What you have and what you do
B. What you do and what you are
C. What you are and what you know
D. What you have and what you are

Answer 18

D. What you have and what you are

Question 19

Bob trusts Glenn. Glenn trusts Jeff. Jeff trusts Mike. What relationship between Bob and Mike?

A. Federated ID
B. Bob is the domain admin and every trusts him.
C. Child Parent Trust Relationship
D. Transitive Trust Relationship

Answer 19

D. Transitive Trust Relationship