Examkin

Soru

Zorluk: KolayIdentity and Access Management Operations

A security administrator is auditing an organization's identity lifecycle procedures to ensure clear operational separation between authentication and authorization controls. Which of the following operational activities specifically perform authentication? (Select TWO.)

  1. Verifying a user's time-based one-time password (TOTP) token during the login sequenceCevap
  2. Validating submitted user credential hashes against an Active Directory domain controllerCevap
  3. C
    Assigning read and write permissions on a shared folder based on a user's job department
  4. D
    Automatically granting resource access because the incoming request originates from an internal network subnet

Cevap

Verifying a user's time-based one-time password (TOTP) token during the login sequence and validating submitted user credential hashes against an Active Directory domain controller specifically perform authentication.
Authentication strictly addresses identity verification. Verifying TOTP tokens and checking submitted credentials against an Active Directory domain controller both serve to confirm that a user is who they claim to be.

Adım Adım Çözüm

1
Define authentication within IAM operations.
Authentication is the process of proving a claimed identity using credentials, tokens, or biometric factors.
Establishing identity must happen before access permissions can be evaluated.
2
Evaluate each activity against the definition of authentication.
Checking TOTP tokens and validating password hashes verify identity claims. Configuring folder permissions assigns rights (authorization), and trusting internal subnets assumes implicit network trust without identity verification.
Only mechanisms that validate claimed identity qualify as authentication operations.

Anahtar Kavram

Distinguishing identity verification (authentication) from access control enforcement (authorization) and perimeter implicit trust in IAM operations.
Bu soruyu puanla

Konular

Identity and Access Management Operations

Bu konudan daha fazla soru