Description

Prepare for Systems Security Certified Practitioner certification (SSCP). Review the Access Controls domain objectives including identification, authorization, and authentication. The (ISC)2 Systems Security Certified Practitioner (SSCP) certification is an excellent entry point to a career in IT security. To help you prepare for the SSCP exam, instructor Mike Chapple has designed a series of courses covering each domain. In this installment, Mike covers the objectives of Access Controls, the first domain, which comprises 16% of the questions on the exam. Topics include identification, authorization, and authentication, including multifactor and mobile device authentication. Learn about the identity management life cycle, and find out how to implement authentication mechanisms and access controls. To join one of Mike's free study groups for access to bonus tips and practice questions, visit certmike.com.

Tags

Syllabus

Syllabus IntroductionControl accessWhat you need to know1. Identity and Access ManagementAccess controlIdentification, authentication, and authorizationSubject/object model2. IdentificationUsernames and access cardsBiometricsRegistration and identity proofing3. AuthenticationAuthentication factorsMultifactor authenticationSomething you havePassword authentication protocolsSSO and federationInternetwork trust architecturesKerberos and LDAPDevice authentication4. Identity Management LifecycleUnderstand account and privilege managementAccount policiesPassword policiesManage rolesAccount monitoringProvisioning and deprovisioning5. AuthorizationUnderstand authorizationMandatory access controlsDiscretionary access controlsAccess control listsAdvanced authorization conceptsConclusionWhat's next? Read more