Cissp Identity And Access Management

Front 1

Authentication

Back 1

The process of verifying the identity of the user.

Front 2

Access Controls

Back 2

Help protect against threats and vulnerabilities by reducing exposure to unauthorized activities and providing access to information and systems to only those who have been approved.

Front 3

Least privilege

Back 3

Requires that users or process be granted access to only those resources necessary to perform assigned functions.

Front 4

7 main categories of access control

Back 4

Directive, deterrent, preventive, detective, corrective, compensating, and recovery.

Front 5

Three types of access control

Back 5

Administrative, physical, and technical

Front 6

Types of failures in biometric identification systems

Back 6

False rejection - failure to recognize a legitimate user.

Fault acceptance - erroneous rejection, either by confusing one user with another or by accepting an imposter as a legitimate user.

Front 7

Three fundamental types of authentication

Back 7

Authentication by knowledge - something a person knows, authentication by possession - something a person has, and authentication by characteristic - something a person is.

Front 8

Potential vulnerability of a Kerberos authentication server

Back 8

A single point of failure and therefore should be supported by backup and continuity plans.

Front 9

Need to know

Back 9

Control access and the owner determines ______ in the mandatory access control system

Front 10

MAC

Back 10

Based on cooperative interaction between the system and the information on them. The systems decision control access and the owner provides the need-to-know control.

Front 11

Issues with considering biometric

Back 11

Resuspended counterfeiting user acceptance reliability and accuracy data storage requirements target user and the coach

Front 12

Fundamental disadvantage of biometrics

Back 12

Revoking credentials. When considering the role of biometrics, its close interaction with people, and the privacy and sensitivity of the information collected, the inability to revoke the physical attribute of the credential becomes a major concern.

Front 13

Role-based access control RBA

Back 13

Is based on user job functions. The model bases the access control authorizations on the rules or functions that the user is assigned within an organization. The determination of what roles have access to resources can be governed by the owner of the data, as with DACs, or applied based on policy, as with MACs.

Front 14

Identity management

Back 14

A set of technologies and processes intended to offer greater efficiency in the management of a diverse user and technical environment.

Front 15

A disadvantage of single sign on

Back 15

A compromise password exposes all authorized resources.

Front 16

least privilege

Back 16

Only rights required to perform a job should be provided to a user, group, or role

Front 17

Authorization process

Back 17

Is a record of all privileges allocated should be maintained. Privileges should not be granted until the authorization process is complete and validated.

Front 18

Associated with each system service or application

Back 18

Privileges and the defined roles within the organization to which they are needed to be identified and clearly documented

Front 19

Phases of the access provisioning lifecycle

Back 19

Provisioning review and revocation

Front 20

Most significant concern with user entitlements

Back 20

Business and organizational processes and access aggregation

Front 21

Guard dog

Back 21

Operational components of physical security

Front 22

Primary purpose for using the one-way encryption of a user password within a system

Back 22

It prevents an unauthorized person from reading or modifying the password list.

Front 23

Typical biometric characteristics that are used to the uniquely authenticate an individual's identity

Back 23

Retina scans

Iris scans

Palms scans