4.2 Given a scenario, install and configure identity and access services.

Question 1

Mutual Authentication

Answer 1

A security feature in which a client process must prove its identity to a server, and the server must prove its identity to the client.

Kerberos and MSCHAP

Question 2

LDAP

Answer 2

Port 389

Secure version port 636

Question 3

Kerberos

Answer 3

-Allows for a single sign-on to a distributed network(remote Access)
-Uses time sensitive tickets
-port 88
-

Question 4

Three components of Kerberos

Answer 4

– Ticket Granting Service (TGS)
– Key Distribution Center (KDC)
– Authentication Service (AS)

Question 5

RADIUS

Answer 5

A AAA server that allows authentication of remote and other network connections.
port 1812 for authentication and authorization
port 1813 for accounting.

Question 6

If you see a question about RADIUS and one of the answer has 802.1X then that is the answer

Answer 6

If you see a question about RADIUS and one of the answer has 802.1X then that is the answer

Question 7

TACACS+

Answer 7

A Cisco Proprietary AAA Server. TCP Port 49

Question 8

Challenge Handshake Authenticate Protocol

Answer 8

CHAP - Challenge handshake process.

Question 9

MSCHAP

Answer 9

Microsoft’s proprietary version of CHAP
Mutual Authentication
legacy

Question 10

SAML

Answer 10

Single Sign on Over the web
based on XML
Federated ID

Question 11

OAUTH

Answer 11

SSO for mobile device applications

Question 12

OpenID Connect

Answer 12

SSO in Smart Device applications

Question 13

Shibboleth

Answer 13

SSO Within Private Networks

Question 14

NTLM

Answer 14

password hash storage system - Legacy

on the exam If you see something called PASS THE HASH - the answer is NTLM

Question 15

What mechanism is used to support the exchange of authentication and authorization details between systems, services, and devices?
A. Biometric
B. Two-factor authentication
C. SAML
D. LDAP

Answer 15

C. SAML

Question 16

You are developing a smart app that will control a new IoT device that automates blinking light fixtures in time with the beat of music. You want using the device to be as simple as possible, so you want an authentication technique that is seamless for the user. Which technology should you implement?

A. OpenID Connect
B. Shibboleth
C. A secure token
D. Role-based access control

Answer 16

A. OpenID Connect