2 cissp ® Official Study Guide Eighth Edition

D.
Sending thousands of emails to a single address
20.
What authentication protocol offers no encryption or protection for logon credentials?
A.
PAP
B.
CHAP
C.
SSL
D.
RADIUS

---

---

Chapter 
13
Managing Identity 
and Authentication
The CISSP exAM ToPICS Covered In 
ThIS ChAPTer InClude:
✓
Domain 5: Identity and Access Management (IAM)
■
5.1 Control physical and logical access to assets
■
5.1.1 Information
■
5.1.2 Systems
■
5.1.3 Devices
■
5.1.4 Facilities
■
5.2 Manage identification and authentication of people, 
devices, and services
■
5.2.1 Identity management implementation
■
5.2.2 Single/multi-factor authentication
■
5.2.3 Accountability
■
5.2.4 Session management
■
5.2.5 Registration and proofing of identity
■
5.2.6 Federated Identity Management (FIM)
■
5.2.7 Credential management systems
■
5.3 Integrate identity as a third-party service
■
5.3.1 On-premise
■
5.3.2 Cloud
■
5.3.3 Federated
■
5.5 Manage the identity and access provisioning lifecycle
■
User access review
■
System account access review
■
Provisioning and deprovisioning

---

The Identity and Access Management (IAM) domain focuses 
on issues related to granting and revoking privileges to access 
data or perform actions on systems. A primary focus is on 
identification, authentication, authorization, and accountability. In this chapter and in 
Chapter 14, “Controlling and Monitoring Access,” we discuss all the objectives within the 
Identity and Access Management domain. Be sure to read and study the materials from 
both chapters to ensure complete coverage of the essential material for this domain.
Controlling Access to Assets
Controlling access to assets is one of the central themes of security, and you’ll find that 
many different security controls work together to provide access control. An asset includes 
information, systems, devices, facilities, and personnel.