Cis 560 dB 6

"Enterprise Access Controls"

The higher the risk of an attacker entering an organization and compromising information, the more constraints the enterprise should place on their users.

• Suppose that your place of employment uses three (3) separate login methods to access different resources on the network. Assess how a Single Sign On (SSO) within an Active Directory Domain would be the best solution to this issue. Explain how Kerberos fits into the design and the mechanism used to provide security. Would there be any downsides to these methods? Justify your answer.