Authentication and Access Control
197 resources created by 127 users
This Authentication and Access Control page on GoConqr gathers community-made quizzes, mind maps, flashcards and notes, from passwords, biometrics and Kerberos to access control models such as DAC, MAC and ABAC. It's built for university students and professional candidates practising for exams like CCNA, Security+ and CISSP, and for teachers after ready-made material. There are over 190 resources here, including more than 50 quizzes and over 80 mind maps. Pick a topic, try a quiz to find your gaps, then build your own set.
Select topic
- Identity and Access Management15
- Authentication Methods15
- Password Security14
- Biometric Authentication15
- Authentication Protocols16
- Kerberos8
- Identity Federation and Single Sign-On5
- AAA and Network Access Control21
- Access Control Models21
- Security Models and Trusted Computing17
- Access Control Lists and Permissions9
- Active Directory9
- AWS Identity and Access Management5
Top Authentication and Access Control resources
-
23 questionsFSSO II TCP ports 139 its optional, only TCP port 445 must be opened between collector agents or FortiGate and all ...
-
Mind map 5. Identity and Access Management -
16 cardsPASSWORD POLICY Password policies, procedures, and security methods.
-
Mind map Crypto U8 (part 3), entity authentication -
Mind map Authentication Systems
-
Mind map U4. Chinese Wall
-
23 questionsCCNA Security Chapter 3 Exam Because of implemented security controls, a user can only access a server with FTP. Which AAA component acc...
-
37 questionsQuiz 19-20 Which utilities do you use to set up loopback policies?
Quizzes
See all 62 quizzes-
23 questionsFSSO II TCP ports 139 its optional, only TCP port 445 must be opened between collector agents or FortiGate and all ...
-
23 questionsCCNA Security Chapter 3 Exam Because of implemented security controls, a user can only access a server with FTP. Which AAA component acc...
-
37 questionsQuiz 19-20 Which utilities do you use to set up loopback policies?
-
20 questionsChapter 11 - 13 The Security Pillar Which of the following options can you not set in a password policy? (Choose two.)
-
164 questionsSecurity + Domain 4 Practice Test - Identity and Access Management You assign access permissions so that users can only access the resources required to accomplish their spec...
-
100 questionsUntitled How granular may an administrator filter an Access Role with identity awareness? Per:
-
60 questionsCISSP Official Study Guide Questions (13-15) Which of the following would not be an asset that an organization would want to protect with access controls?
-
164 questionsInformation security and data protection What is the purpose of access control list?
Mind maps
See all 90 mind mapsFlashcards
See all 26 flashcards-
16 cardsPASSWORD POLICY Password policies, procedures, and security methods.
-
21 cardsComp Sec
-
29 cardsRisk Management 4 What does Access Control deal with?
-
15 cardsAuthentication Services & Access Controls Terminal Access Controller Access-Control System (TACACS)
-
15 cardsACCESS CONTROLS Effective Operating Controls
-
16 cardsAuthentication Concepts Entity or Principal
-
18 cardsLDAP (Day 3) this protocol defines how clients access the directory server and perform directory operations over an IP n...
-
19 cardsSecurity+ Authentication
Flowcharts
Notes
See all 16 notes-
CHAP Challenge Handshake Authentication Protocol (CHAP) Challenge Handshake Authentication Protocol (CHAP) is a widely supported authentication method in which a representation of the user's password, rather than the passw...
-
Authentication & Identity Identity - Username/PasswordEverybody who has an online account with Facebook, Twitter, Spotify etc will know that usernames are hard to remember. Not only this, passwords are even harder to remember! Those who access...
-
Identity and Access Services Authorisation Definition function of specifying access rights and privileges to resources related to information security process of ensuring only users who are suppose to have access to certain resources are given ac...
-
Reference Monitors Security kernel- implementation of a reference monitorTrusted computing base- kernel + other protection measuresReference monitor- "an access control concept that refers to an abstract machine that mediates all access...
-
Access Control Steps in Authentication and Authorisation Subject/ principle- an active entity Object- resource being accessed Access Operation Reference Monitor- grants or denies access Access control has 2 steps- Authentication- wh...
-
Passwords and Authentication Identification- Who you areAuthentication- Verify that identityPasswords are digital keys, demonstrates someone is who they say they are and understood by users.Passwords are a terrible way to handle authenticationPas...
-
Exam - Kerberos - created from Mind Map principals & their roles A Kerberos principal is a unique identity to which Kerberos can assign tickets. Principals can have an arbitrary number of components: the primary, the instance and the realm. format typically...
-
access control - created from Mind Map access control principles information classification access control system
Slides
Topics in Authentication and Access Control
More Cybersecurity topics
About Authentication and Access Control
GoConqr OriginalWhat this unit covers
The page follows two linked ideas: proving who you are, and deciding what you may do. Authentication material includes the mind map Authentication Systems, which sorts mechanisms into knowledge, ownership and inherence, and notes that mechanisms can be combined for stronger assurance. There are also notes on CHAP and a flashcard deck on password policy, covering complexity, length, history and credential stuffing.
Access control models and biometrics
A long run of mind maps covers biometrics, from basics and enrolment to errors, fingerprints, signatures and attacks. Another run covers access control models, including Bell-LaPladula, Biba, Clark Wilson and Harrison–Ruzzo–Ullman. The Chinese Wall map aims at conflicts of interest, with a golden rule that no information may flow in a way that causes one. Quizzes on DAC, MAC and ABAC let you test the differences.
Protocols and directory services
For protocols, the entity authentication map explains identity assurance and freshness, and mutual versus unilateral checks. Further maps cover Needham–Schroeder and Kerberos, including messages and security. There is also a deck on LDAP and a quiz on FSSO II, which asks about the TCP ports needed between collector agents or FortiGate and hosts.
Where to start
- Open Authentication Systems for the big picture.
- Read the Identity and Access Management map, which carries CISSP exam tips on authentication, authorization and accountability.
- Work through the maps on models or biometrics that match your course.
- Test yourself with the CCNA Security Chapter 3 Exam quiz or the Security+ Domain 4 practice test on Identity and Access Management.
Using maps and quizzes together
Read a map first, then take a quiz on the same topic. Note the questions you miss and go back to the matching map branch. Flashcards then help with terms such as password attack methods. This unit sits in the Cryptography and Identity strand of Cybersecurity. Choose one topic today and try its quiz.
Frequently asked questions
Which resource should I open first?
Start with the Authentication Systems mind map. It lays out knowledge, ownership and inherence and how they combine into stronger authentication. Then move to the Identity and Access Management map, which links authentication, authorization and accountability. After that, pick a quiz on the same ideas to check what stuck.
What do the mind maps on biometrics cover?
They run from biometric basics and feature properties to enrolment, errors, fingerprints, signature recognition, multimodal systems, product selection and attacks. Taken in order, they work as a short course. Follow them with a quiz or the flashcards on authentication to check your recall.
Which exams do these resources relate to?
Listed resources mention CCNA, Security+ and CISSP. Examples include the CCNA Security Chapter 3 Exam quiz, a Security+ Domain 4 practice test on Identity and Access Management, and a CISSP-tipped map on Identity and Access Management. They suit university students and professional candidates.
Are the resources free, and who made them?
Every resource here is free to open, study and take, with no account needed. They were made by GoConqr users, not by GoConqr itself. A free account also saves your quiz scores and lets you make your own quizzes, mind maps, flashcards and notes.
Where can I learn about Kerberos?
There are several maps: Kerberos, Kerberos and Windows network authentication, Kerberos messages and Kerberos security. An exam-focused Kerberos map has a matching set of notes made from it. Read them in that order, then test yourself with the authentication protocols quiz.
What if my topic is missing?
Try nearby resources first, such as the notes on access control or the flashcards on access control models. They may cover your topic from another angle. You can also make your own mind map, quiz or flashcards for the gap and keep them for revision.