3.8 implement authentication and authorization solutions

Question 1

CHAP

Answer 1

challenge handshake authentication protocol

a method for verifying a user’s identity during an online session. CHAP is used by Point-to-Point Protocol (PPP) servers to authenticate remote users.

three way handshake

Question 2

RADIUS

Answer 2

a client-server protocol that authenticates and authorizes users to access a network.

RADIUS is a widely used networking protocol that offers centralized authentication, authorization, and accounting (AAA) for users.

Used in federations.

Question 3

TACACS

Answer 3

remote authentication protocol

an external authentication method that verifies user identity when accessing network devices.

cisco based

Question 4

Kerberos

Answer 4

the default authorization technology in Microsoft Windows.

a computer network security protocol that authenticates service requests between trusted hosts over an untrusted network.

SSO microsoft

Question 5

EAP

Answer 5

extensible authentication protocol

is an authentication framework frequently used in network and internet connections.

Question 6

PTPP

Answer 6

point to point protocol

a TCP/IP protocol that connects two computer systems. It’s a data link layer protocol that transmits multiprotocol data between two directly connected computers.

Question 7

802.1x

Answer 7

a protocol that authenticates users to a central authority. It’s used to secure wired and wireless networks. 802.1X is considered the gold standard for securing networks.

Question 8

SAML

Answer 8

Security Assertion Markup Language

XML standard that allows secure web domains to exchange user authentication and authorization data. Using SAML, an online service provider can contact a separate online identity provider to authenticate users who are trying to access secure content.

Question 9

PAP

Answer 9

password authentication protocol

Question 10

OAuth

Answer 10

open authentication initiative

OATH defines algorithms and protocols for creating and verifying one-time passwords (OTPs).

Question 11

OpenID

Answer 11

OpenID is built upon OAuth and uses SSO.

Question 12

ABAC

Answer 12

Attribute-based access control

policies based on characteristics, such as department, location, manager, and time of day.

Question 13

DAC

Answer 13

discretionary access control

a type of security access control that restricts or grants access to objects.

Question 14

MAC

Answer 14

Mandatory Access Control

a cybersecurity system that controls access to sensitive information in an organization