Lesson 7: Identity and Access Management
Week of Tue, Oct 27 · lesson closes Mon, Nov 2
Take Meerk's quiz for Lesson 7
This lesson's items
Exact due times are in Canvas.
Watch — Professor Messer
Watch — Professor Messer: Identity and Access Management (SY0-701)
Free, independent educational resource. Not affiliated with or endorsed by CompTIA. Watch, then read the notes below.
Know these cold
- Authentication factors: knowledge (password, PIN), possession (smart card, TOTP token), inherence (biometric), location, behavior. MFA requires two or more distinct categories.
- Access control models: DAC (owner grants access), MAC (government labels — top secret, secret, etc.), RBAC (role-based — most common in business), ABAC (attribute-based — most flexible).
- Federation: SAML (XML, enterprise SSO), OAuth 2.0 (authorization delegation), OIDC (OpenID Connect — identity layer over OAuth). SSO reduces credential fatigue.
Meerk's quiz — open the Lesson 7 gate
10 questions, no time limit. 85% on your first attempt in a 24-hour window opens the gate. Retakes inside the window are practice — they help you learn, they don't count. Work alone; the point is to know it, not to have seen it.
Dinner Table Question
Ask at home: Why is using the same password for work and personal accounts a security risk?
En español: ¿Por qué usar la misma contraseña para el trabajo y cuentas personales es un riesgo de seguridad?