Security+ IAM Terms and Concepts Flashcards

Front

Define biometrics in the context of authentication.

Back

Biometrics refers to the use of physical characteristics, such as fingerprints, facial recognition, or iris scans, to verify identity.

Front

Define privileged access management (PAM).

Back

PAM is the process of managing and controlling access to critical systems and data by privileged users, including administrators and superusers.

Front

Define single-factor authentication (SFA).

Back

SFA is a security process that requires only one method of authentication, such as a password, to verify the identity of the user.

Front

Describe the concept of attribute-based access control (ABAC).

Back

ABAC is an access control method where access rights are granted based on attributes, such as user role, department, and security clearance level.

Front

Explain the concept of role-based access control (RBAC).

Back

RBAC is a method of regulating access to computer or network resources based on the roles of individual users within an enterprise.

Front

Explain the use of LDAP in identity management.

Back

LDAP, or Lightweight Directory Access Protocol, is an open, vendor-neutral, industry standard for accessing and maintaining distributed directory information services over an IP network.

Front

What are access control lists (ACLs)?

Back

ACLs are a set of rules that allow or deny access to network resources, based on user identities or other criteria.

Front

What is a digital certificate?

Back

A digital certificate is an electronic document used to prove the ownership of a public key, typically issued by a certificate authority (CA).

Front

What is a directory service?

Back

A directory service is a software system that stores, organizes, and provides access to information in a directory.

Front

What is an identity provider (IdP)?

Back

An IdP is a system or service that creates, maintains, and manages identity information for principals and provides authentication services to relying applications within a federation or distributed network.