Lesson 4 - CertMaster Content

Identity and Access Management (IAM)

Processes that control access to an organization's applications, data, and services through user identification and authentication.

Authentication

The process of verifying that an account holder is who they claim to be, often requiring the submission of credentials.

Multifactor Authentication (MFA)

An authentication method that requires two or more verification factors to gain access to a resource.

Discretionary Access Control (DAC)

An access control model where the resource owner determines who can access their resources.

Mandatory Access Control (MAC)

An access control model that uses fixed security clearance levels to manage access to resources.

Role-Based Access Control (RBAC)

An access control model that defines permissions based on the roles assigned to users.

Attribute-Based Access Control (ABAC)

An access control model that grants users permissions based on predefined attributes.

Single Sign-On (SSO)

A user authentication process that allows a user to access multiple applications with one set of login credentials.

Privileged Access Management (PAM)

Policies and controls that protect accounts with significant permissions to prevent unauthorized access and enhance security.

False Acceptance Rate (FAR)

The rate at which unauthorized users are incorrectly granted access by an authentication system.

False Rejection Rate (FRR)

The rate at which legitimate users are incorrectly denied access by an authentication system.

Crossover Error Rate (CER)

The point at which the false acceptance rate and false rejection rate are equal, indicating the effectiveness of an authentication system.

Knowledge-Based Authentication (KBA)

A method of authentication that relies on the user providing information that only they should know.

Password Manager

A tool or application that helps users manage and store passwords securely.

Common Name (CN)

A distinguished name attribute that represents a unique identifier for an object in a directory service.

Security Assertion Markup Language (SAML)

An open-standard for exchanging authentication and authorization data between parties, particularly between an identity provider and a service provider.

Open Authorization (OAuth)

An open standard for access delegation used for token-based authentication and authorization.

Conditional Access

A set of conditions that apply to access requests based on user context, such as location and time.

Least Privilege

A principle in access control where users are granted the minimum necessary permissions to perform their tasks.

User Account Provisioning

The process of creating, managing, and deactivating user accounts systematically within an organization.