cisco certification karachi

cisco certification karachi.Knowledge authentication Something the user knows Password, PINAuthentication by Ownership Something the user owns Smart card, access card, tokenAuthentication by characteristic Characteristics of the user itself or of the user's behavior Fingerprint, palmprint, keystroke strength4. Multi-authenticationX - ...An authentication system may simultaneously enable multiple methods (e.g., passwords and access cards) as shown in Table 4.2 to perform authentication. Whether the system performs one, two or three authentication depends on the number of authentication methods it requires the user to perform simultaneously. The more "heavy" the authentication, the more powerful the authentication system will be. An authentication system is considered to be highly functional if at least two different authentication methods are enabled at the same time.Tip: It is important to understand that identification and authentication are two different operations, even though they are usually performed together. Identification involves determining "who" the user is, while authentication involves proving that the user is "the god" he claims to be.4.4 Access Control Basics 1854.4.3 Authorization Authorization is the process of granting a subject access to an object or resource. The process usually occurs after the subject has completed authentication. A policy or rule is required to specify the circumstances under which the subject should be able to access the resource. In addition, during the process of granting access, the permissions associated with the subject/objectpair should be checked in order to grant the correct access to the subject. The owner and manager who is the object usually decides (or places) the permissions and authorization policy, and such a policy governs the entire authorization process. When developing authorization policies and rules, various attributes should be taken into account, for example, the identity of the subject, the location where the subject issues the access request, and the role of the subject within the unit. The access control model (described in detail later in this chapter) provides the framework for the implementation of authorization policies. An authorization policy should implement the following two concepts.implicit deny (implicit deny): if there are no explicit rules for a transaction between subjects, then the authorization policy should deny the transaction.