ISC2 · CISSP
Access, identification, and authentication
CISSP · Lesson 20 of 34 · 2:29:13
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: managing access to assets and identities, identification, authentication, authorization, and accounting, MFA, groups and roles, session management, identity proofing, password vaults, just-in-time access, and passwordless authentication with FIDO, WebAuthn, passkeys, and biometrics. Includes three original practice questions.
Preview the topics
- A clinician signs in with a password, then must also enter a PIN. What kind of authentication is this?
- Larkspur wants authentication that resists phishing, with no password at all, and synced across each user’s devices. What fits?
- Two biometric systems are compared. Which measure shows which one is more accurate overall?