Identity Management

Question 1

Define identity management

Answer 1

The process of managing the entire lifecycle of digital identities

Question 2

Define authorization

Answer 2

The process of determining whether a user is permitted to access a certain resource

Question 3

How do you check authorization?

Answer 3

By checking the resources access request against policies that are stored in the IAM (identity access management system ) policy store (that could be active directory inside of Windows)

Question 4

What are the five areas that make up the identity management life cycle

Answer 4

Authorization 
Proofing 
Provisioning 
Maintenance 
Entitlement

Question 5

Describe identity Proofing

Answer 5

Verifying users identities before an enterprise issues their accounts and credentials

Question 6

What are the process of provisioning

Answer 6

Creation of the identifier for the identity ( ex: user name)
Linkage to the authentication providers ( ex: tokens, credentials manufacturing for several systems)
Setting and changing attributes and privileges ( modifying permissions, and revisiting permissions to make sure user has correct access)
Decommissioning of the identity

Question 7

List the five types of entity that require digital identities

Answer 7

People 
Devices 
Organization 
Code
Agents

Question 8

Entitlement is defined as

Answer 8

When the resource owner manages access to a resource and grants certain permissions