Identity & Access Management

Question 1

An unified login experience when accessing one or more systems

Answer 1

Single Sign On (SSO)

Question 2

Involves the use of simply one of the three available factors solely in order to carry out the authentication process being requested

Answer 2

Single Factor Authentication

Question 3

A version of the SAML OASIS standard for exchanging authentication & authorization data between security domains

Answer 3

Security Assertion Markup Language 2.0 (SAML)

Question 4

An access control model that based on a list of predefined rules that determine what accesses should be granted

Answer 4

Rule-Based Access Control

Question 5

An access control model that bases the access control authorizations on the roles that the user is assigned within an organization

Answer 5

Role-Based Access Control

Question 6

A non-contact, automatic identification technology that uses radio signals to identify, track, sort and detect a variety of objects including people, vehicles, goods, & assets without the need for direct contact

Answer 6

Radio Frequency Identification (RFID)

Question 7

Allows authorized security personnel to simultaneously manage & monitor multiple entry points from a single centralized location

Answer 7

Physical Access Control Systems (PACS)

Question 8

A system that manages passwords consistently across the enterprise

Answer 8

Password Management System

Question 9

Ensures that a user is who they claim to be. The more factors used to determine a person’s identity, the greater the trust of authenticity

Answer 9

Multi-Factor Authentication

Question 10

Access Control that requires the system itself to manage access controls in accordance with the organization’s security policies

Answer 10

Mandatory Access Control (MAC)

Question 11

A 48-bit number that is supposed to be globally unique

Answer 11

MAC Address

Question 12

Protection mechanisms that limit user’s access to information & restrict their forms of access on the system to only what is appropriate for them

Answer 12

Logical Access Controls

Question 13

Developing standard for authenticating network users. Offers two key benefits: Functions in a multi-vendor network, & it does not transmit passwords over the network

Answer 13

Kerberos

Question 14

Process of collecting & verifying information about a person for the purpose of proving that a person who has requested an account, a credential, or other special privilege is indeed who he or she claims to be, & establishing a reliable relationship

Answer 14

Identity Proofing

Question 15

Cloud-based services that broker identity & access management functions to target systems on customer’s premises and/or in the cloud

Answer 15

Identity as a Service (IDaaS)

Question 16

Protects enterprise assets & provides a history of who gained access & when the access was granted

Answer 16

Facility Access Control

Question 17

The process of establishing confidence in user identities electronically presented to an information system

Answer 17

Electronic Authentication

Question 18

A hardware device that contains non-programmable logic & non-volatile storage dedicated to all cryptographic operations & protection of private keys

Answer 18

Cryptographic Device

Question 19

Process of defining the specific resources a user needs & determining the type of access to those resources the user may have

Answer 19

Authorization

Question 20

Process of verifying the identity of the user

Answer 20

Authentication

Question 21

Systems that attempt to streamline the administration of user identity across multiple systems

Answer 21

Account Management Systems

Question 22

Physical or electronic systems designed to control who, or what, has access to a network

Answer 22

Access Control Systems

Question 23

Used to enter secured areas of a facility & are used in conjunction with a badge reader to read information stored on the badge

Answer 23

Access Badge

Question 24

Provides the system with a way of uniquely identifying a particular user among all the users of that system

Answer 24

User ID

Question 25

A local hardware encryption engine & secured storage for encryption keys

Answer 25

Trusted Platform Module