025.1 Identity and Authentication

025.1 Identity and Authentication

Reference to LPI objectives

Security Essentials version 1.0, Exam 020, Objective 025.1

Weight

3

Key knowledge areas

  • Understanding of the concepts of digital identities.

  • Understanding of the concepts of authentication, authorization, and accounting

  • Understanding of the characteristics of secure password (e.g. length, special characters, change frequencies, complexity)

  • Using a password manager

  • Understanding of the concepts of security questions and account recovery tools

  • Understanding of the concepts of multi-factor authentication (MFA), including common factors

  • Understanding of the concepts of single sign-on (SSO) and social media logins

  • Understanding of the role of email accounts for IT security

  • Understanding of how passwords are stored in online services

  • Understanding of common attacks against passwords

  • Monitoring personal accounts for password leaks (e.g. search engine alerts for usernames and password leak checkers)

  • Understanding of the security aspects of online banking and credit cards

Partial list of the used files, terms and utilities

  • Online and offline password managers

  • keepass2

  • Single sign-on (SSO)

  • Two-factor authentication (2FA) and multi-factor authentication (MFA)

  • One-time passwords (OTP), time-based one-time passwords (TOTP)

  • Authenticator applications

  • Password hashing and salting

  • Brute force attacks, directory attacks, rainbow table attacks

Linux Professional Insitute Inc. All rights reserved. Visit the Learning Materials website: https://learning.lpi.org
This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.