Chapter 4

Question 1

Identification

Answer 1

the process of verifying a user’s identity before they can access a system or network.

Question 2

Authentication

Answer 2

The process of verifying a user’s identity before granting them access to a system or network.

Question 3

Authorization

Answer 3

The process of determining whether a verified user has the necessary permissions to assess a specific resource or perform an action within a system.

Question 4

Multifactor Authentication (MFA)

Answer 4

Using more than one factor of authentication

Factors
-Something you do - your signature

• Something you exhibit - typing speed
• Someone you know - certificate that’s coming from a server like VeriSign
• Somewhere you are - Physical location thing.

Question 5

Identification and AAA

Answer 5

• Identification
• Authentication
• Authorization
• Accounting - auditing

Question 6

Authorization

Answer 6

• Based on permissions granted
• Determines resource permissions
  
  • targets that have permissions applied to them
  • example: files, database rows, web app
• Can only occur after authentication

Question 7

Accounting/auditing

Answer 7

Track permissions usage for accountability purposes.
Who or what accessed which resource, how long, on what date?