2 Identity and Access Management Free Online FlashCards

What is identity and access management (IAM)?

Identity and access management (IAM) manages identities and controls access so each person or service receives only the access needed, for the right purpose and duration.

What does authentication establish?

Authentication verifies who or what is requesting access by checking that the entity controls an authenticator associated with its identity.

What are the three authentication-factor categories?

The three categories are something you know, such as a password; something you have, such as a security key; and something you are, such as a fingerprint.

How does role-based access control (RBAC) assign permissions?

Role-based access control (RBAC) assigns permissions to roles, then gives users roles based on their job duties.

What is the principle of least privilege?

Least privilege grants each person, application, service, or process only the access needed for its assigned tasks—and no more.

How should IAM handle a change in someone’s job duties?

When someone changes jobs, teams, or responsibilities, reassess their access and remove permissions that are no longer needed so access does not accumulate.

What does an identity represent in a system?

An identity represents a person, service, device, or other entity in a system and is usually associated with an identifier and attributes.

What does authorization determine?

Authorization determines which actions an authenticated entity may perform on a resource. Authentication alone does not grant access to every resource.

What makes authentication multifactor?

Multifactor authentication (MFA) uses factors from at least two different categories. Two passwords are not MFA because both are knowledge factors.

How can a security key resist phishing?

Phishing-resistant security keys bind authentication to the legitimate service, offering stronger protection against fake sign-in pages than manually entered codes.

What information does attribute-based access control (ABAC) evaluate?

Attribute-based access control (ABAC) evaluates attributes of the requester, resource, requested action, and sometimes the environment to make an access decision.

What does an access-control list (ACL) specify?

An access-control list (ACL) associates a resource with a list of identities or groups and the actions each is allowed to perform.