Security+ IAM Terms and Concepts Quizs

Describe the concept of attribute-based access control (ABAC).

• ABAC is an access control method where access rights are granted based on attributes, such as user role, department, and security clearance level.

• ABAC is a method that restricts access based solely on the user's identity without considering any attributes.

• ABAC is a system that allows access to all users regardless of their roles or attributes.

• ABAC is a technique that uses biometric data to grant access to secure systems.

What is a directory service?

• A software system that stores, organizes, and provides access to information in a directory.

• A type of hardware used for data storage.

• A network protocol for transferring files.

• A programming language for web development.

What is a digital certificate?

• A type of software used for data encryption.

• An electronic document used to prove the ownership of a public key, typically issued by a certificate authority (CA).

• A physical card that contains a user's personal information.

• A document that verifies the identity of a user without any encryption.

Define biometrics in the context of authentication.

• Biometrics refers to the use of physical characteristics, such as fingerprints, facial recognition, or iris scans, to verify identity.

• Biometrics is a method of securing data through encryption and passwords.

• Biometrics involves the use of digital signatures for online transactions.

• Biometrics is the process of creating complex passwords for user accounts.

What is the principle of least privilege?

• Users should have unlimited access to all resources.

• Users should be granted the minimum levels of access needed to perform their job functions.

• Users should be granted access based on their seniority.

• Users should have access to all resources for better collaboration.

What is identity federation?

• The process of creating multiple digital identities for users.

• The practice of linking a single digital identity and its characteristics across multiple systems or organizations.

• A method for securing data within a single organization.

• The technique of merging different organizations into one entity.

Explain the use of LDAP in identity management.

• LDAP stands for Lightweight Directory Access Protocol and is used for accessing and maintaining distributed directory information services over an IP network.

• LDAP is a proprietary protocol used exclusively by Microsoft for managing user identities.

• LDAP is a database management system that stores user passwords in an encrypted format.

• LDAP is a web-based application for managing user access to cloud services.

What are access control lists (ACLs)?

• ACLs are a set of rules that allow or deny access to network resources, based on user identities or other criteria.

• ACLs are a type of software that enhances network speed and performance.

• ACLs are security protocols that encrypt data during transmission.

• ACLs are hardware devices used to monitor network traffic.

Explain the concept of role-based access control (RBAC).

• RBAC is a method of regulating access to computer or network resources based on the roles of individual users within an enterprise.

• RBAC is a technique for encrypting data to ensure privacy and security.

• RBAC is a framework for developing software applications in a modular way.

• RBAC is a strategy for managing user passwords and authentication processes.

What is the difference between authentication and authorization?

• Authentication is the process of verifying the identity of a user, while authorization is the process of granting or denying access to resources based on the user's identity.

• Authentication is the process of granting access to resources, while authorization is the process of verifying the identity of a user.

• Authentication and authorization are the same processes used to secure a system.

• Authentication is the process of creating user accounts, while authorization is the process of logging in.