4.2 Install and configure identity access services

Question 1

LDAP

Answer 1

(Lightweight Directory Access Protocol) A network protocol used to access network directory databases, which store information about authorized users and their privileges, as well as other organizational information.

Question 2

Kerberos

Answer 2

An authentication service that is based on a time-sensitive ticket-granting system.

Question 3

TACACS+

Answer 3

(Terminal Access Controller Access Control System Plus) An alternative to RADIUS developed by Cisco. Handles Identification, Authentication, Authorization, and Accounting (AAA) services.

Question 4

CHAP

Answer 4

(Challenge Handshake Authentication Protocol) Authentication scheme developed for dial-up networks that uses an encrypted three-way handshake to authenticate the client to the server. The challenge-response is repeated throughout the connection (though transparently to the user) to guard against replay attacks.

Question 5

PAP

Answer 5

(Password Authentication Protocol) Obsolete authentication mechanism used with PPP. PAP transfers the password in plaintext and so is vulnerable to eavesdropping.

Question 6

RADIUS

Answer 6

(Remote Authentication Dial-in User Service) A standard protocol used to manage remote and wireless authentication infrastructures. Provides Authentication, Authorization, and Accounting (AAA) services.

Question 7

SAML

Answer 7

(Security Assertion Markup Language) An XML-based data format used to exchange authentication information between a client and a service.

Question 8

OpenID Connect

Answer 8

An identity federation method that enables users to be authenticated on cooperating websites by a third-party authentication service.

Question 9

OAuth

Answer 9

(Open Authorization) A token-based authorization protocol that is often used in conjunction with OpenID.

Question 10

Shibboleth

Answer 10

An identity federation method that provides single sign-on capabilities and enables websites to make informed authorization decisions for access to protected online resources.

Question 11

Secure token

Answer 11

A physical or virtual item that contains authentication data, commonly used in multifactor authentication.

Question 12

NTLM

Answer 12

(NT LAN Manager authentication) A challenge-response authentication protocol created by Microsoft for use in its products.