Save
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

Security + CompTIA

Domain 4 Identity and Access Management

TermDefinition
Authentication Factors Something you are, something you have, something you know, somewhere you are, something you do
Physical Access Controls biometrics, fingerprints, iris scans
Identification presenting credentials or keys
TOTP algorithm that relies on shared secret and moving factor or counter (Time-based One Time Password)
HOTP algorithm specifies an event-based OTP algorithm, where the moving factor is an event counter. The present work bases the moving factor on a time value. A time-based variant of the OTP algorithm provides short-lived OTP values
Username & Password most common form of authentication
Password Lockout prevents brute-force attacks
Federation System accounts in one area can be granted access rights to any other resource, whether local or remote within the domains
Radius provides authentication and authorization functions in addition to network access accounting functions - does not provide access control
KERBEROS supports mutual authentication, protecting against man-in-the-middle attacks
PAP Password Authentication Protocol - weak authentication - strongly discouraged
OAUTH provides authorization services, does not provide authentication such as Open ID and SAML
SAML - Security Assertion Markup Language an open standard for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider.
IdP source of username and password authenticates. SP provides service to user
Access Controls these include MAC, DAC, ABAC, RBAC
CAC & PIV Cards provide smar card functions for identity and authentication
Disabled, not deleted employees that leave should have their accounts _______________
True T/F Generic accounts used by multiple users should be prohibited - IE "Managers"
Role Based or Role/Group Based logical controls managing users
TLS Technology using port 636 LDAP traffic can be made confidential and secure through:
Popular Standardized Tests sets

 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards