Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cloud Digital Leader > CDL - Identity > Flashcards

CDL - Identity Flashcards

1
Q

What is a directory service?

A

A DS maps the names of network resources to their network addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Cloud Identity?

A

A Identity as a Service (IDaaS) that centrally manages users and group within a SINGLE PANE OF GLASS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What features constitute Cloud Identity?

A
  • User lifecycle management
  • SSO
  • Device management
  • Cloud Directory
  • Account security
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

IS Google Cloud Directory Sync a sub-service of Cloud Identity?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Active Directory?

A

A service that allows orgs to manage multiple on-prem infra components and systems using a SINGLE identity per user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is AD Domain Services (ADDS)?

A

A Microsoft server based directory service that stores and managers information about a network resources. Facilitates resource access and management

Note: AD services consist of multiple directory services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Managed Service for Microsoft AD?

A

It is an AD hostd on the GCP platform.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

If you have Managed Service for Micro Active Directory why and how would you use Cloud Identity?

A

1) MicroAD may have features that Cloud Identity does not

2) Via federation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are key benefits of Managed Service for Micro AD?

A

1) Maintenance free

2) Seamless multi-region deployment

3) Hybrid identity support

4) Compatibility with AD-dependent apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How does a Directory Service work?

A

It works as a shared information infrastructure for locating, managing, administering, and organizing resources.

Analogy - A magical map that locates all your toys and friends (resources & users)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a Identity Provide (IdP)?

A

A service that creates, maintains, and manages identity information to provide authentication to services/applications within a federation or distributed network.

Eg: FB, Amzn, Google, Twitter.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are objects in a Directory Service?

A

Objects are resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are examples of resources on a directory service?

A

Users
Goups
Devises
Folders / files
Printers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Is a directory service a critical component of a network operating system?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Single-sign-on (SSO)? What ia a key benefit?

A

Seamless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Lightweight Directory Access Protocol?

A

Hey protocol for accessing in managing directory information resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why use LDAP when SSO is more convenient?

A
19
Q

What is Google Cloud Directory Sync (Exam)?

A
20
Q

What is a Directory Server?

A

It is a server which provides a directory service

21
Q

What are well known Directory Services ?

A

DNS - for the internet

MicoAD

OpenLDAP

Cloud Identity

22
Q

Can Cloud Identity federate identities between different ADs?

A

Yes

Between GCP, AD, Azure AD, etc.

23
Q

How does Cloud Identity work?

A

A zero trust service that Allows you to manage access and compliance across all users within your domain

AND

allows you to create a CI account for each of your users/groups.

IAM is used to manage access between GCP resources and cloud identity acounts.

24
Q

What deployment principles are characteristic by ADs?

A

They are redundant and placed as close to end users to reduce latency

25
Q

What are the various DS that comprise Active Directory?

A

AD Lightweight Directory Services (ADLDS)

AD Federation Services (ADFS)

26
Q

What is a federated service?

A

A SSO service allows users to use several web-based services using only ONE set of credentials stored at a central location.

27
Q

What is AD Lightweight Directory Services (ADLDS)?

A

An implementation of LDAP protocol

28
Q

What elements comprise a Active Directory?

A

Org units

Domains – a network area organized by a single authentication DB

Domain Controller

Domain Computer

Objects

29
Q

What are objects ?

A

The basic element in a AD – users, groups, printers, devices, folders, etc

30
Q

What is a Domain Computer

A

A computer registered with a CENTRAL authentication DB

It is also a object

31
Q

What is an AD domain?

A

A logical grouping of AD objects on a network

32
Q

What is a Directory Service?

A

An example of ADDS – it provides methods for data storage and making the data available to network users and admins

Runs on a Domain Controller

33
Q

What is a federated identity?

A

A method of linking a user’s identity across multiple identity management systems

34
Q

What is OpenID?

A

OpenID is about providing who you are, and it is a open and decentralized authentication protocol.

Use case: Logging into diff social media accounts via Google or FB

35
Q

What is OAuth2.0

A

OAuth is about granting access to functionality.

Its a protocol that uses authorization tokens to prove identity between users and service providers.

Does not use PW data

36
Q

What is SAML?Use case?

A

Security Assertion Markup Language

An open standard for exchanging authentication & authorization between IdP and service providers.

Use case: SSO via web browserSSO

37
Q

What is SSO?

A

Single sign on.

An authentication scheme that allows users to log in with a SINGLE ID & password to different systems and software.

38
Q

Key benefit of SSO?

A

seamless

39
Q

What is a typical SSO diagram look like?

A

Azure AD –> SAML –> SS0 –> Services (slack, GWS, etc.)

40
Q

What is Light weight Directory Access Protocol (LDAP)?

A

A protocol for accessing and maintaining distributed directory information services

On-prem AD –> LDAP Directory –> Services (GCP, GKE)

41
Q

How do LDAPs work?

A

Via Same sign -on - The user of a single ID + PW, but unlike SSO, you have to reuse them every time a user logs on.

42
Q

Common LDAP use case?

A

To provide a central place to store usernames and pws

43
Q

What is Google Cloud Directory Sync (exam)?

A

A synchronization service that allows admins to sync users, groups, and other data between AD/LDAP to their Managed Service for MicoAD within Google.

Cloud Digital Leader (13 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions