6. Authentication and Authorization Flashcards
What does authentication mean?
Topic: Identity Services
To confirm your identity.
What does authorization mean?
Topic: Identity Services
To govern access to control after being authenticated
What must all Azure accounts have?
Topic: Azure Active Directory
Every Azure account must have an Azure AD service.
Describe Azure Active Directory
Topic: Azure Active Directory
Azure AD is used to manage users and permisions
What is a tenant in Azure AD?
List 3 charactheristics of tenants.
Topic: Azure Active Directory
A tenant is a representation of an organization.
* Each organization is given a dedicated instance (tenant) of Azure AD on sign up
* Each tenant is distinct and seperate from other tenants.
* Users can only belong to one tenant, but can be guest of other tenants.
What is true about the relationship between tenants and subscriptions?
Topic: Azure Active Directory
A tenant can have multiple subscriptions to seperate cost, but a subscription can only be associated to one tenant.
Describe Multi-Factor Authentication
Topic: Azure Active Directory
Extra layer of security using something you know, something you have, and something you are
Describe passwordless authentication
Give three examples
Topic: Azure Active Directory
Using something you have and something you know/are for authentication.
1. Microsoft authenticator app
2. Windows Hello
2. FIDO2 security key
Describe single sign-on
Topic: Azure Active Directory
Allows users to use single username and password to log in to multiple apps using AAD.
What is the preferred method for inviting users to tenant who are not in the organization?
Topic: Azure Active Directory
Invite an existing Azure account as an external guest.
How does Azure AD support hybrid architectures?
Topic: Azure Active Directory
Azure AD can manage users on-premesis and in the cloud.
Describe the concept of Zero Trust
Topic: Zero Trust
All users are assumed untrustworthy, unless proven otherwise (trusted identities vs. trusted location).
Describe Conditional Access policy
List one benefit for management.
Topic: Conditional Access
Authentication protections beyond username/password that uses if/then policies to grant access.
* Simplifies centralized management
What are the two main components of Conditional Access?
Topic: Conditional Access
- Signals
- Decisions
