Week 5 Authentication & Access Control

Question 1

What is authentication?

Answer 1

Methods and techniques to verify the identity of users, devices, or entities attempting to access a system or resource.

Question 2

What are the principles of authentication?

Answer 2

• Identification:
• Verification:
• Authorization:
• Authentication Factors:

Question 3

What are some common authentication methods?

Answer 3

• Password-based Authentication:
• Multi-factor Authentication (MFA):
• Biometric Authentication:
• Token-based Authentication:
• Certificate-based Authentication:
• Single Sign-On (SSO):
• Risk-based Authentication:
  .

Question 4

What are the best practices for authentication?

Answer 4

• Use Strong Password Policies
• Implement MFA
• Secure Authentication Data:
• Regularly Update Authentication Mechanisms:
• Monitor and Audit Authentication Events
• Educate Users
• Continuously Assess and Improve:

Question 5

What is Access Control?

Answer 5

Regulates and restricts access to resources, systems, or data within a computing environment.

Question 6

What are the principles of access controls?

Answer 6

• Principle of Least Privilege (PoLP):
• Need-to-Know Principle:
• Separation of Duties (SoD):

Question 7

What are the different types of access control?

Answer 7

• Discretionary Access Control (DAC):
• Mandatory Access Control (MAC):
• Role-Based Access Control (RBAC):
• Attribute-Based Access Control (ABAC):

Question 8

What are the access controls mechanisms?

Answer 8

• Authentication:
• Authorization:
• Access Enforcement:
• Auditing and Monitoring:

Question 9

What are the best practices for access control?

Answer 9

• Implement Defense-in-Depth:
• Regularly Review and Update Policies:
• Enforce Strong Authentication:
• Apply Principle of Least Privilege:
• Secure Administrative Access:
• Monitor and Audit Access:
• Provide User Education and Awareness: