CIMP Access Management & Authentication Flashcards

What is Multi-Factor Authentication (MFA) and why is it important in identity management?

Answer: Requiring two or more verification factors to prove identity, significantly reducing unauthorized access risk

MFA combines something you know, have, or are to verify identity, making it much harder for attackers to gain access even if one factor is compromised.

Which authentication factor category does a fingerprint scan belong to?

Answer: Something you are

Biometrics such as fingerprints, iris scans, and facial recognition fall into the 'something you are' authentication factor category.

What is Single Sign-On (SSO) and what is its primary benefit?

Answer: An authentication method that allows users to log in once and access multiple applications without re-authenticating

SSO reduces password fatigue and improves user experience by allowing one authenticated session to grant access to multiple connected applications.

In access management, what does 'adaptive authentication' mean?

Answer: A risk-based approach that adjusts authentication requirements based on context such as location, device, and behavior

Adaptive authentication evaluates contextual signals to determine the risk level of a login attempt and increases authentication requirements when risk is elevated.

What is a RADIUS server's role in access management?

Answer: It centralizes authentication, authorization, and accounting (AAA) for network access

RADIUS (Remote Authentication Dial-In User Service) centralizes AAA services for network devices, VPNs, and wireless access points.

What distinguishes authentication from authorization in the context of identity management?

Answer: Authentication verifies who you are; authorization determines what you are permitted to do

Authentication confirms identity (who are you?), while authorization determines access rights (what are you allowed to do?) after identity is established.