4.1 Authentication

What is identification?

Who you claim to be, usually your uername.

What is the AAA framework made of?

Authentication, authorization, and accounting.

What is authentication?

Prove you are who you say are, usually with your password.

What is authorization?

Based on your identification and authentication, what access do you have?

What is accounting?

Document login time, data sent and receiving, and logout time.

What is single sign-on (SSO)?

Get access to all available or assigned resources by providing credential once.

What long is SSO usually limited to?

Around 24 hours.

What is Remote Authentication Dial-in user Service (RADIUS)?

Centralizes authentication for users.

What is lightweight directory access protocol?

Reading and writing directory service over an IP network.

What is an X.500 Distinguished Name?

Unique identifiers to pinpoint specific objects within a hierarchy, with the most specific attribute listed and first.

What is an X.500 Directory Information Tree?

Hierarchy dividing the organization into different sections.

What are containers in an X.500 Directory Information Tree?

Countries, organizations, or organizational units.

What are leaf object in an X.500 Directory Information Tree?

Users, computers, and printers are files.

What is Security Assertion Markup Language (SAML)?

An open standard for authentication and authorization.

What is Terminal Access Controller Access Control System (TACAS)?

A remote authentication protocol created to control access to dial-up lines to ARAPNET.

What is TACAS+?

More authentication request and response codes.

What is multifactor authentication?

Prove who you are through multiple ways.

How can you prove you are through multifactor authentication?

Memorized password, mobile app, and your GPS location.

What are factors you can prove who you are through multifactor authentication?

Something you know, something you have, something you are, and somewhere you are.

What is time-based one-time password algorithm?

Use a secret key and the time of day.

How is the secret key for time-based one-time password algorithm configured?

It’s configured ahead of time, with the timestamps being synchronized via NTP.

How often does the timestamp for time-based one-time password algorithm increment?

It increments every 30 seconds.