Examkin

Question

Difficulty: EasyIdentity and Access Management Operations

A security administrator is auditing an organization's identity lifecycle procedures to ensure clear operational separation between authentication and authorization controls. Which of the following operational activities specifically perform authentication? (Select TWO.)

  1. Verifying a user's time-based one-time password (TOTP) token during the login sequenceAnswer
  2. Validating submitted user credential hashes against an Active Directory domain controllerAnswer
  3. C
    Assigning read and write permissions on a shared folder based on a user's job department
  4. D
    Automatically granting resource access because the incoming request originates from an internal network subnet

Answer

Verifying a user's time-based one-time password (TOTP) token during the login sequence and validating submitted user credential hashes against an Active Directory domain controller specifically perform authentication.
Authentication strictly addresses identity verification. Verifying TOTP tokens and checking submitted credentials against an Active Directory domain controller both serve to confirm that a user is who they claim to be.

Step-by-Step Solution

1
Define authentication within IAM operations.
Authentication is the process of proving a claimed identity using credentials, tokens, or biometric factors.
Establishing identity must happen before access permissions can be evaluated.
2
Evaluate each activity against the definition of authentication.
Checking TOTP tokens and validating password hashes verify identity claims. Configuring folder permissions assigns rights (authorization), and trusting internal subnets assumes implicit network trust without identity verification.
Only mechanisms that validate claimed identity qualify as authentication operations.

Key Concept

Distinguishing identity verification (authentication) from access control enforcement (authorization) and perimeter implicit trust in IAM operations.
Rate this question

Topics

Identity and Access Management Operations

More questions from this topic