IAM

Question 1

Clipping level

Answer 1

Prevent administrative overhead

Allow extra failed login
Prevent password guessing by locking the user from a certain timeframe or admin unlock

Question 2

3 types of authentification ?

Answer 2

Type 1 : something’s you know
Type 2: something you have
Type 3: something you are

Question 3

Token HOTP

Answer 3

HMAC based one time password

Generate code when asked valid until used

Question 4

Token TOTP

Answer 4

Time based one time password
Synchronized

Question 5

FRR (false rejection rate)

Answer 5

Type 1 error
Authorized users are rejected

Question 6

FAR (false accept rate)

Answer 6

Type 2 error
Unauthorized user is granted access

Question 7

CER (crossover error rate)

Answer 7

The meeting point between frr and far, this is where we want to be

Question 8

ABAC

Answer 8

Attribute based access control

Access granted based on subject objects AND conditions
Also named as pbac or cbac

Who, what, where are you connected from, what time is it ?

Question 9

RUBAC

Answer 9

Rule access based

Rule as acl and firewall