CASE Identity & Access Management Flashcards

What does the principle of least privilege require?

Answer: Granting users only the minimum permissions necessary to perform their job duties

Least privilege limits access rights to the minimum required for a user's role, reducing the attack surface from over-permissioned accounts.

What is Multi-Factor Authentication (MFA)?

Answer: Requiring two or more verification factors from different categories to authenticate

MFA requires credentials from two or more independent factor categories — knowledge, possession, and inherence — to verify identity.

How does Role-Based Access Control (RBAC) manage permissions?

Answer: By assigning permissions to defined roles rather than to individual users

RBAC assigns permissions to predefined roles, and users gain access by being assigned to roles appropriate for their job function.

What is federated identity in application security?

Answer: An identity management approach allowing authentication to span multiple trust domains

Federated identity enables a user to authenticate once in one domain and access resources across multiple organizations or systems without re-authenticating.

What is the role of an Identity Provider (IdP)?

Answer: To authenticate users and assert their identity to relying service providers

An Identity Provider authenticates users and issues identity assertions such as tokens or claims that service providers trust for access decisions.

What does SAML stand for?

Answer: Security Assertion Markup Language

SAML (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between identity and service providers.