Deck 10: Identity Management

Question 1

5)In the Internet world, most certificates follow the LDAP standard defined in RFC 2459 by IETF.

Answer 1

False

Question 2

9)The IdM platform gets all of its identity data from the ____.

A) infrastructure services
B) identity data layer
C) object identity management
D) user identity management

Answer 2

B

Question 3

8)The IdM ____ provide common services for all the components within the IdM platform.

A) infrastructure services
B) identity data layer
C) object identity management
D) user identity management

Answer 3

A

Question 4

16)In ____ modeling, the administrator programs a set of rules that would apply to the identity data set.

A) rule-based
B) role-based
C) location-based
D) group-based

Question 5

14)The ____ engine provides the means of subdividing the management of the huge amount of identity data that an IdM system processes.

A) modeling
B) delegated administration
C) audit
D) workflow

Question 6

19)____ is defined as a business process to service a request associated with an identity.

A) Workflow
B) DN
C) Provisioning
D) Data broker

Question 7

10)A(n) ____ allows users or applications to find resources that have characteristics needed for a particular task.

A) access manager
B) password manager
C) data store
D) system of records

Question 8

18)The entity needs to remember only one strong password to access all resources instead of trying to remember and manage different passwords for different systems. We call this ____.

A) password recycling
B) password reuse
C) password grouping
D) password synchronization

Question 9

2)Data in an X.500 directory is organized in a linear name space capable of supporting large amounts of information.

Question 10

17)The ____ component as an IdM infrastructure is an end-to-end framework for capturing identity and security operational logs.

A) data broker
B) DA engine
C) audit
D) workflow engine

Question 11

12)____ is a mechanism for defining a collection of attributes for the instantiation of a directory entry.

A) Object class (OC)
B) Distinguished name (DN)
C) Secondary identifying document (SID)
D) Identifying characteristics (IC)

Question 12

13)____ is defined as the procedural steps, the identity involved, the required input, and the output of resources needed to produce a given result such as a product or service.

A) Entity
B) Audit
C) Data broker
D) Workflow

Question 13

11)The job of the ____ component is to process identity information.

A) access manager
B) data broker
C) password manager
D) system records

Question 14

6)A(n) ____ is defined as an object that has separate and distinct existence with objective or conceptual reality.

A) characteristic
B) distinguished name
C) identity
D) entity

Question 15

7)____ is a standard document that refers to the identity of an entity.

A) IC
B) SIC
C) SID
D) PID

Question 16

20)The ____ works with infrastructure services in the IdM platform to provide replicable rules for repeatable automated workflow for provisioning accounts and other services associated with an identity.

A) provisioning module
B) audit module
C) password management module
D) workflow module

Question 17

15)The goal of the ____ is to model the identity data set into a particular format.

A) DA engine
B) workflow engine
C) data broker
D) modeling module

Question 18

3)Data entries in LDAP directory are arranged in a hierarchical structure that reflects political, geographic, and/or organizational boundaries.

Question 19

4)A password can be both strong and easy to remember at the same time.

Question 20

1)Security enhancement and cost savings are the two major reasons for identity management.

Question 21

31)Under the IDIM model, the core of the IdM platform is the IdM ____________________.

Question 22

39)What are some of the characteristics of a poor/weak password?

Question 23

22)A(n) ____ is an electronic document used to identify an individual, a company, or any other entity.

A) SPML certificate
B) DN certificate
C) digital certificate
D) CA certificate

Question 24

28)____________________ is a collection of information about objects arranged in some order that gives details about each object.

Question 25

34)Briefly describe the Universal ID approach.

Question 26

23)The ____ in the IdM platform is a specialized module that provides PKI-related services.

A) password management module
B) PKIM
C) SPML
D) provisioning module

Question 27

25)____ is the ability to determine what data an identity can view, alter, create, or delete and/or what systems that identity can change.

A) Identity
B) Entity
C) Authentication
D) Authorization

Question 28

36)What are the primary goals for IdM in the private sector?

Question 29

41)What are the main characteristics of passphrases?

Question 30

29)____________________ is the suite of communications protocols used to connect hosts on the Internet.

Question 31

26)____ is a XML-based framework for Web services that enables the exchange of authentication and authorization information among different organizations.

A) SMPL
B) SAML
C) LDAP
D) X.500

Question 32

27)____________________ refers to a set of technologies intended to manage a basic issue: information about the identity of users, employees, contractors, customers, partners, and vendors is distributed among too many systems and is consequently difficult to manage securely.

Question 33

24)____ is the assurance that an identity to some computerized transaction is not an impostor.

A) Authentication
B) Identity
C) Authorization
D) Entity

Question 34

21)____ is developed as a standard from OASIS using an XML-based framework for exchanging user, resource, and service provisioning information between cooperating organizations.

A) X.500
B) SPML
C) LDAP
D) OSI

Question 35

What are some of the characteristics of a strong password?

Question 36

37)Describe the main characteristics of a virtual directory.

Question 37

35)Briefly described the Clustered ID approach.

Question 38

33)What are some other fields or areas that are combined with security technology when providing a security solution?

Question 39

38)What are the RFC that define LDAP version 3?

Question 40

30)Each LDAP directory entry is a collection of attributes with a unique name called a(n) ____________________.

Question 42

42)What are the main characteristics of UDDI?