CISSP Cert Prep (2021): 5 Identity and Access Management

Use this course to help you prepare for the Identify & Access Management domain of the 2021 CISSP exam.

Introduction

• Identity and access management
• What you need to know
• Study resources

1. Identification

• Identification, authentication, and authorization
• Usernames and access cards
• Biometrics
• Registration and identity proofing

2. Authentication

• Authentication factors
• Multifactor authentication
• Something you have
• Password authentication protocols
• Single sign-on and federation
• RADIUS and TACACS
• Kerberos and LDAP
• SAML
• Identity as a service (IDaaS)
• OAuth and OpenID Connect
• Certificate-based authentication

3. Accountability

• Accountability
• Session management

4. Account Management

• Understand account and privilege management
• Account types
• Account policies
• Password policies
• Manage roles
• Account monitoring
• Privileged access management
• Provisioning and deprovisioning

5. Authorization

• Understand authorization
• Mandatory access controls
• Discretionary access controls
• Access control lists
• Database access control
• Advanced authorization concepts

6. Access Control Attacks

• Social engineering
• Impersonation attacks
• Identity fraud and pretexting
• Watering hole attacks
• Physical social engineering

Conclusion

• Continuing your preparation