Chapter 5

Access Control and Identity Management

The Following CompTIA Security+ Exam Objectives Are Covered in This Chapter:

• 1.2 Apply and implement secure network administration principles.
  • Firewall rules
  • VLAN management
  • Secure router configuration
  • Access control lists
  • Implicit deny
• 1.3 Distinguish and differentiate network design elements and compounds.
  • NAC
• 3.2 Analyze and differentiate among types of attacks.
  • Transitive access
  • Client-side attacks
• 5.1 Explain the function and purpose of authentication services.
  • RADIUS
  • TACACS
  • TACACS+
  • Kerberos
  • LDAP
  • XTACACS
• 5.2 Explain the fundamental concepts and best practices related to authentication, authorization, and access control.
  • Identification vs. authentication
  • Authentication (single factor) and authorization
  • Multifactor authentication
  • Tokens
  • Common access card
  • Personal identification verification card
  • Smart card
  • Single sign on
  • ACLs
  • Access control
  • Mandatory access control
  • Discretionary access control
  • Role/rule-based access control
  • Implicit deny
  • Trusted OS