Cyber Security Identity and Access Management

Question 1

What is multi-factor authentication (MFA)?

Accepted Answer

Requiring two or more verification factors from different categories to authenticate

Answer

MFA combines something you know, something you have, and/or something you are to verify identity more securely.

Question 2

What is the purpose of Single Sign-On (SSO)?

Accepted Answer

Allow a user to authenticate once and gain access to multiple applications

Answer

SSO lets users authenticate once with a central identity provider and access multiple connected applications without re-authenticating.

Question 3

What does RBAC (Role-Based Access Control) grant permissions based on?

Accepted Answer

The user's assigned role within the organization

Answer

RBAC assigns permissions to roles (e.g., admin, editor, viewer) and users inherit permissions by being assigned to roles.

Question 4

What is an access token in OAuth 2.0 used for?

Accepted Answer

Authorizing an application to access resources on behalf of a user

Answer

An OAuth 2.0 access token grants an application permission to access specific resources without exposing user credentials.

Question 5

What is the purpose of an Identity Provider (IdP) in federated identity management?

Accepted Answer

Authenticate users and issue identity assertions consumed by service providers

Answer

An IdP authenticates users centrally and issues tokens or assertions that service providers trust to grant access.

Cyber Security Practice Test