cisco certification jobs

cisco certification jobs.The relationship between the subject, object, and access control measures is shown in Figure 4-1. Figure 4-1 Interaction between Subject, Object, and Access Control Measures4.4 Access Control Basics Access Control Measures As mentioned earlier, access control helps to develop and enforce policies that aim to restrict what people can access what resources in which way. Access control features four major components or 4 processes: (identity) identification, authentication, authorization, andSubjectsbookkeeping. While these four components have similar definitions and uses, each defines separately the specific needs of the access control systemrequirements.4.4.1 Identification is the process of identifying the subject or user, which is the first step in the authentication, authorization, and accounting processes. Providing a user name, a "pass", an IP address, or even reading one's own name is considered a form of identification. Each user should be able to uniquely "reveal" his or her identity, and for this reason, secure identification should be based on uniqueness. This is particularly important for account monitoring. In the absence of a connected authentication system, there may be duplicate identities. Let's say that every user can use the same user name to4.4 Access Control Basics 183access corporate and personal email accounts. Security identities should also be non-descriptive, in a way that makes it difficult for an outsider to infer information related to the user's identity. For example, it is not recommended that the Administrator be used as the user ID. identities must be published in a secure manner that should cover all processes and steps of identity requests and approval of identity requests. This method of publishing identities is often referred to as secure publishing.Tip: Identities should not be treated as secret.Important concepts related to identity are shown below. [. Sprawl A secure identity should be grounded in uniqueness and never allow two users to have the same identity.