Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
IAM
identity and access managment
| Question | Answer |
|---|---|
| Identity and access management (IAM) | Systems and processes used to manage access to information in an organization to ensure that the right individuals have access to the right resources at the right times for the right reasons |
| Identification | Process where a user claimed and identity to a system typically using a unique identifier like a username or email address |
| Authentication | Process of verifying the identity of a User, device, or system, and this involves validating the credentials provided by the User against the database of authorized users |
| Authorization | Process that determines what permissions or levels of access that User has |
| Accounting | Process of tracking and recording User activities |
| Provisioning | Process of creating new user accounts, assigning them appropriate permissions, and providing users with access to systems |
| De provisioning | Process of removing an individuals access rights when the rights are no longer required |
| Identity proofing | Process of verifying the identity of a user before the account is created |
| Interoperability | The ability of different systems, devices and applications to work together and share information |
| Attestation | Process of validating that User accounts and access rights are correct and up-to-date |
| Multi factor authentication (MFA) | Security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity |
| Knowledge based factor | Knowledge based information that the user must provide to authenticate their identity |
| Possession based factor | Something that User physically possesses like a smart card, a hardware token like a key fob, or a software token used with a smart phone |
| Inherence-based factor | Involves biometric characteristics that are unique to individuals, including fingerprints, facial recognition, voice, recognition or Iris scans |
| Location based factor | Involve determining a Users location to help authenticate them |
| Behavior based factor | Recognizing patterns that are typically associated with a user such as their key stroke patterns, mouse movement I use your walks down the hallway |
| Single factor authentication | Using a single authentication factor to access a user account |
| Two factor authentication (2FA) | Using two different authentication factors to gain access to a system |
| Multi factor authentication | Using two or more factors to authenticate with a given system |
| Passkeys | Users can create and access online account without needing to input a password |
| Password security | Measures the passwords ability to resist guessing and brute force attacks |
| Password length | Use 12 to 16 characters for better security |
| password complexity | Mix uppercase, lowercase, numbers, and symbols |
| Password reuse | Using the same password for multiple accounts increases risk |
| Password expiration | Mandates regular password changes |
| password age | Refers to the length of time my password has been in use |
| Password managers | Store, generate, and autofill passwords to enhance security |
| Password generation | Password managers create unique strong passwords for accounts to prevent reuse and enhanced security |
| autofill | Password managers, autofill login details, sparing users the need to recall or input information manually |
| Secure sharing | password managers provide secure methods to share passwords without directly disclosing the password itself |
| Cross platform access | Password managers offer cross device compatibility, allowing access to passwords from any location or device |
| Passwordless authentication | Provides improved security and a more user-friendly experience |
| Biometric authentication | Verifies identity using distinct biological features like fingerprints, facial recognition, or iris scans |
| Hardware token | Physical device, like a security key, that generates a short duration and ever-changing login code |
| One time password (OTP) | Code sent to email or phone used to login or authenticate access |
| Magic link | Email link that automatically logs a user into a website |
| Passkey | Serves as an authentication tool that integrates with the browser or operating system |
| Brute force attack | Involves trying every possible combination of characters into the correct password is found |
| Dictionary attack | Using a list (or 'dictionary') of commonly used passwords and trying them all |
| password spraying | A form of brute force attack that involves trying a small number of commonly used, passwords against a large number of usernames or accounts |
| hybrid attack | Blends brute force and dictionary techniques by using common passwords with variations, such as adding numbers or special characters |
| single sign-on (SSO) | Authentication process that allows a user to access multiple applications or websites by logging in only once with a single set of credentials |
| Identity provider (IdP) | System that creates, maintains, and manages identity information for principals while providing authentication service to relying applications with an federation or distributed network |
| Lightweight directory Access protocol (LDAP) | Used to access and maintain distributed directory information services over an Internet protocol network |
| Open authorization (OAuth) | Open standard for token-based authentication and authorization that allows an individual's account information to be used by third-party services without exposing the users password |
| security assertion markup language (SAML) | A standard for logging users into applications based on their sessions in another context |
| Federation | Process that allows for the linking of electronic identities and attributes to store information across multiple distinct identity management systems |
| login initiation | The User access a service or application and chooses to login |
| redirection to an identity provider | The service provider redirects the user to the identity provider (IdP) for authentication |
| authenticating the User | After a User submits credentials to the identity provider (IdP), it validates the users identity |
| Generation of an assertion | The IdP creates an assertion that includes information about the news identity |
| Returning to a service provider | The User is redirected back to the service provider with the authentication assertion from the identity provider (IdP) |
| verification and access | The surface provider checks the assertion from a trusted IDP and grant access based on its information |
| Privileged access management (PAM) | Solution that helps organizations restricted monitor privileged access within an IT environment |
| just in time permissions | Security model where administrative access is granted only when needed for a specific period |
| Password vaulting | Technique used to store and manage passwords in a secure environment, such as in a digital vault |
| temporal accounts | Used to provide time limited access to resources, and they are automatically disabled or deleted after a certain period of time |
| Mandatory access control (MAC) | Employs security labels to authorize user access to specific resources |
| discretionary access control (DAC) | Resources owner determines which users can access each resource |
| role-based access control (RBAC) | Assigns users to roles and uses these rules to grant permissions to resources |
| rule based access control (RBAC) | Enable administrators to apply security policies to all users |
| attribute based access control (ABAC) | Uses object characteristics for access control decisions |
| user attributes | User's name, role, organization, ID or security clearance level |
| environment attributes | Time of access data, location, and current organizations threat level |
| resource attributes | File creation date, resource owner, file name, and data sensitivity |
| Time of day restrictions | Controls restrict resource access based on request times |
| Principle of least privilege | Creating users, the minimum access required for their task without extra privileges |
| permission or authorization creep | Occurs when a user gains excessive rights during their career progression in the company |
| mandatory access control (MAC) | Access is determined by central authority policies, granting or denying it to the User |
| discretionary access control (DAC) | Owner decides who can access the information or resource |
| role- based access control (RBAC) | Access permissions rely on roles in the organization |
| attribute based access control (ABAC) | Access is permitted or denied based on user, action, or resource attributes |
| principal of least privilege | User should only have the minimum access rights needed to perform their job functions and task and nothing additional or extra |
| Microsoft account | Free online account that you can use to sign into a variety of Microsoft services |
| user account control (UAC) | A mechanism designed to ensure that actions requiring administrative rights are explicitly authorized by the User |
Created by:
user-2044395