Identity & Access Management Flashcards

What does the principle of least privilege state?

Answer: Users should only have the minimum permissions necessary to perform their job functions

The principle of least privilege limits user permissions to only what is required for their role, reducing the attack surface.

Which of the following best describes Multi-Factor Authentication (MFA)?

Answer: Requiring authentication from two or more independent credential categories

MFA requires users to verify identity using two or more factors from different categories such as something you know, have, or are.

What is Role-Based Access Control (RBAC)?

Answer: Granting users permissions based on their assigned organizational roles

RBAC assigns access rights based on predefined roles within an organization, simplifying access management and enforcement.

What is Single Sign-On (SSO)?

Answer: An authentication scheme allowing users to log in once and access multiple applications

SSO allows users to authenticate once and gain access to multiple systems without re-authenticating for each individual application.

Which type of account typically has elevated privileges and is used to run automated processes or services?

Answer: Service account

Service accounts are specialized accounts with elevated privileges used to run applications, background services, or automated processes.

What is an Access Control List (ACL)?

Answer: A list of permissions attached to an object specifying which subjects can access it and how

An ACL is a set of rules that defines which subjects have which access rights to specific objects such as files or network resources.

What is the primary purpose of Privileged Access Management (PAM)?

Answer: To control and monitor access to critical systems by privileged users and accounts

PAM focuses on securing, controlling, and monitoring privileged accounts that have elevated access to critical infrastructure and systems.