CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 12

Authentication and Authorization Design

This chapter covers the following official Security+ exam objective:

• ▶ 2.4 Summarize authentication and authorization design concepts.

Essential Terms and Components

• ▶ authentication

• ▶ federation

• ▶ time-based one-time password (TOTP)

• ▶ HMAC-based one-time password (HOTP)

• ▶ false acceptance rate (FAR)

• ▶ false rejection rate (FRR)

• ▶ crossover error rate (CER)

• ▶ biometrics

• ▶ multifactor authentication (MFA)

• ▶ authentication, authorization, and accounting (AAA)

Identification and Authentication, Authorization, and Accounting (AAA)

It is necessary to discern the differences between the actions identification and authentication, authorization, and accounting (AAA) because you will be tested ...