Start Here
Five review stations, each a different way to practice Chapter 7. Work through them in any order. Nothing here is graded or stored, so use it as many times as you like before the quiz or the exam.
What this chapter asked you to be able to do
- Describe the account lifecycle: provisioning, rights assignment, identity proofing, and secure deprovisioning.
- Tell apart standard, privileged, service, third-party, and emergency accounts and the controls each one needs.
- Explain multi-factor authentication and weigh the tradeoffs of the three factors: something you know, have, or are.
- Compare access control models: RBAC, ABAC, MAC, DAC, and just-in-time access by complexity and security.
- Explain federated identity (SAML, OAuth, OpenID Connect) and single sign-on, plus modern password guidance and passkeys.
Your progress this session
These counters update as you check answers on each station. They reset when you reload the page.
Key Terms Flashcards
Select a card to reveal its definition, then select again to flip it back. Try to state the definition before you flip. The counter tracks how many distinct cards you have opened.
Matching a Scenario to an Access Control Model
An access control model defines how permissions are assigned and enforced. Read each scenario and choose the model it describes, then check your answer.
Reference: access control decision matrix
| Model | Granularity | Complexity | Scalability | Flexibility |
|---|---|---|---|---|
| RBAC | Medium | Low | High | Medium |
| ABAC | High | High | Medium | High |
| MAC | Medium | Medium | Medium | Low |
| DAC | High | Low | Medium | High |
| JIT | Very High | Medium | Medium | High |
RBAC scales well but needs the right number of roles. ABAC is the most flexible but the hardest to configure and troubleshoot.
Classifying Authentication by Factor
Every authentication method draws on one of three factors. Read each example and choose the factor it uses, then check your answer.
Matching a Description to an Account Type
Different account types carry different risk and require different controls. Read each description and choose the account type it fits, then check your answer.
Knowledge Check
Ten multiple-choice questions across the whole chapter. Answer them all, then select Score my answers for feedback and a final total.