Identity and Access Management Quiz

What is the purpose of Identity and Access Management (IAM)?

• To configure access control models

• To implement directory services

• To manage physical access control devices

• To provide identity, authentication, and authorization mechanisms for entities to work with organizational assets

Which access control model compares an object's security designation with a subject's clearance level?

• ABAC

• RBAC

• MAC

• DAC

What is the purpose of a Biometric Device like a fingerprint scanner?

• To scan the blood vessels in the retina portion of the eye

• To take a digital image of the entire face for identification

• To capture a live image of a person's fingerprint for authentication

• To record a voiceprint for authentication

What is the purpose of Certificate-Based Authentication?

• To scan the blood vessels in the retina portion of the eye

• To take a digital image of the entire face for identification

• To prove the identity of a public key owner

• To capture a live image of a person's fingerprint for authentication

What is the main task of Authentication, Authorization, and Accounting (AAA) solutions?

• Storing credentials in an encrypted database

• Enforcing password length and complexity

• Managing physical access control devices

• Verifying object identification, ensuring relevant permissions, and logging actions

Which protocol is commonly used for dial-up Internet access and provides encryption for passwords and secure authentication?

• PPP

• PPTP

• L2TP

• SSTP

What is the purpose of HMAC-Based One-Time Passwords (OTPs)?

• To generate a one-time password using a hash-based message authentication code for authenticity

• To send user IDs and passwords as plaintext for authentication

• To establish secure connections using SSL/TLS encryption

• To provide access control to remote access servers

What is the main function of a Credential Manager?

• To manage physical access control devices

• To provide identity, authentication, and authorization mechanisms

• To store and organize account credentials in an encrypted database

• To enforce password length and complexity

What does Group Policy provide methods for managing across a Windows domain?

• Managing physical access control devices

• Implementing directory services

• Storing credentials in an encrypted database

• Enforcing password length, complexity, account lockout thresholds, etc.

What is the purpose of Identity Federation?

• To store user names and passwords in an encrypted database

• To provide centralized management structure for identities

• To link a single identity across multiple disparate identity management systems

• To enforce password length and complexity