IAAA

Question 1

identification

Answer 1

identify an entity

Question 2

is identification and authentication the same

Answer 2

no

Question 3

what is authentication

Answer 3

proof who you claim to be

Question 4

way of authentication

Answer 4

password, PIN, Biometric

Question 5

what is no repudiation

Answer 5

prevent someone from denying the authenticity of a statement or their actions

Question 6

authorization

Answer 6

level of clearance

Question 7

what are clearances

Answer 7

the type of data, system, application you have access to.

Question 8

accountability

Answer 8

holding user responsible for their action

Question 9

what’s account audit

Answer 9

to make sure that privileges are appropriately assigned and updated

Question 10

provisioning (Identity lifecycle)

Answer 10

create new account n assign privileges ( Authorization)

Question 11

review (identity lifecycle)

Answer 11

1. periodic account review
2. disable inactive account
3. audit privilege creep

Question 12

what is privilege creep

Answer 12

when someone accumulates privileges over time as their roles change, but older privileges are not relinquished

Question 13

revocation (identity lifecycle)

Answer 13

disable account of employee who leave, retired, or are terminated

Question 14

Authentication factor
type 1

Answer 14

something that you know:
.password
.pin

Question 15

authentication factors
type 2

Answer 15

something that you have
-smart card
-mobile SIM

Question 16

authentication factors
type 3

Answer 16

something that you are
-retina pattern
-finger prints

Question 17

what’s MFA

Answer 17

MFA stands for multifactor Authentication. it’s combine two or more types to strengthen the authentication process

Question 18

roles of accountability

Answer 18

audit of logs and account to identify any violations

Question 19

authorization min

Answer 19

give a subject the minimum data/ info and privilege that he/she needs to complete their job.
it’s the fundamental idea in cybersecurity to provide least privileges

Question 20

why is minimum privileges important?

Answer 20

if privileges is unchecked, they can cause serious cybersecurity repercussions. they can be abused

Question 21

how is accountability enforced

Answer 21

log audits, account audits, job rotations, and non-repudiation