Identify, specify, or describe good access control and authentication processes and techniques.
The “AAA” concept is the cornerstone of any systematic discipline of security (IT or otherwise). It is composed of:
Access control. Manages which individuals or accounts may interact with specific resources, and governs what kinds of operations such individuals or accounts may perform on those resources. Access controls usually rest on some notion of identity, which may be associated with a specific individual or account, or with a group to which that individual or account belongs.
Authentication. Process of verifying a user's identity through the use of a shared secret (such as a password), ...