Sorry, you have Javascript Disabled! To see this page as it is meant to appear, please enable your Javascript!

Understanding Identity and Access Management

You must be logged in to view this content.

Course Content

Expand All | Collapse All

Lessons Status

1

Introduction

2

Exploring Authentication Concepts
Comparing Identification and AAA
Comparing Authentication Factors
Something You Know (Password Complexity)
Something You Know (Password Expiration/Recovery/History/Reuse)
Something You Know (Policy)
Something You Know (Account Lockout/Default Passwords)
Something You Have (Smart Cards/CACs and PIVs)
Something You Have (Token/HOTP/TOTP)
Something You Are
Somewhere You Are/Something You Do
Dual-Factor and Multifactor Authentication
Summarizing Identification Methods/Troubleshooting Authentication Issues

3

Comparing Authentication Services
Kerberos/NTLM/LDAP
Single Sign-On
SSO and Transitive Trusts/SAML/Federation/OAuth

4

Managing Accounts
Least Privilege/Need to Know
Account Types/Administrators to Use Two Accounts
Naming Convention/Shared and Generic Accounts
Time-of-Day Restrictions/Expiring Accounts
Account Maintenance/Credential Management
Disablement Policies/Recovering Accounts

5

Comparing Access Control Models
Role-Based Access Control (Using Roles Based/Documenting Roles)
Role-Based Access Control (Group-Based Privileges)
Rule-Based Access Control
Discretionary Access Control
Mandatory Access Control
Attribute-Based Access Control

6

Understanding Identity and Access Management Exam Topic Review