IAM Flashcards
What is Provisioning? / 什么是 Provisioning？
Creating user accounts and giving them access to systems.
创建用户账户并赋予访问权限。
What is Deprovisioning? / 什么是 Deprovisioning？
Removing a user’s access when it’s no longer needed.
在用户不再需要权限时撤销其访问。
What is Identity Proofing? / 什么是 Identity Proofing？
Verifying a user’s identity before account creation.
在创建账户前验证用户身份。
What is Interoperability? / 什么是 Interoperability？
Different systems working together and sharing identity info.
不同系统之间可以协同工作，分享身份信息。
What is Attestation? / 什么是 Attestation？
Reviewing and confirming if user access is still appropriate.
定期审查并确认用户权限是否仍然合适。
What is a Brute Force Attack? / 什么是 Brute Force 攻击？
Trying every possible password combination until the correct one is found.
尝试所有可能的密码组合，直到猜中为止。
What is a Dictionary Attack? / 什么是 Dictionary 攻击？
Using a list of common passwords to try to guess the password.
使用常见密码列表来尝试猜中用户密码。
What is Password Spraying? / 什么是 Password Spraying？
Trying a few common passwords across many accounts to avoid lockouts.
用几个常见密码试很多个账号，避免被系统锁定。
What is a Hybrid Attack? / 什么是 Hybrid 攻击？
Combining dictionary and brute force methods, like adding numbers or symbols to words.
结合字典和暴力破解的方法，比如在常见密码后加数字或符号。
What is SSO (Single Sign-On)? / 什么是 SSO？
One login lets you access multiple apps or services.
一次登录，访问多个应用或服务。
What is LDAP used for? / LDAP 是做什么的？
Centralized user directory for authentication and permissions.
用于统一管理用户信息和身份认证的目录服务。
What is OAuth? / 什么是 OAuth？
A way to let third-party apps access your data without sharing your password.
允许第三方应用在不暴露密码的情况下访问你的数据。
What is SAML used for? / SAML 是做什么的？
Authenticates users through an identity provider and sends login confirmation to apps.
通过身份提供者验证用户，并将登录状态断言发送给应用。
What is PAM? / 什么是 PAM？
A system that protects and controls high-level (admin) access to prevent misuse.
用于保护和控制管理员权限，防止误用或攻击的系统。
What is Just-in-Time (JIT) Access? / 什么是 Just-in-Time 权限？
Temporary admin access given only when needed for a specific task.
在需要时临时授予管理员权限，用完即撤销。
What is Password Vaulting? / 什么是 Password Vaulting？
Storing sensitive credentials in a secure, encrypted vault.
将敏感密码保存在加密的保险库中并控制访问。
What is a Temporal Account? / 什么是 Temporal Account？
A short-term user account that is auto-disabled after use.
使用后自动失效的短期临时账户。
What is MAC (Mandatory Access Control)? / 什么是 MAC？
System-enforced access using security labels; users can’t change permissions.
系统强制的访问控制，基于安全等级标签，用户不能更改权限。
What is DAC (Discretionary Access Control)? / 什么是 DAC？
The owner decides who can access the resource and what actions they can take.
资源拥有者决定谁可以访问资源，以及能做什么操作。
What is RBAC (Role-Based Access Control)? / 什么是 RBAC？
Access is based on the user’s job role.
权限是根据用户的职位角色分配的。
What is Rule-Based Access Control? / 什么是 Rule-Based？
Access is controlled by system-defined rules or policies.
权限由系统设定的规则控制，与用户角色无关。
What is ABAC (Attribute-Based Access Control)? / 什么是 ABAC？
Access is based on multiple attributes like user, resource, time, and location.
权限由多个属性组合判断，如用户身份、资源类型、时间和地点等。
