200-301 · Question #444
How does authentication differ from authorization?
The correct answer is A. Authentication verifies the identity of a person accessing a network, and authorization determines. Authentication verifies a user's identity, while authorization determines the specific network resources and actions that authenticated user is permitted to access.
Question
How does authentication differ from authorization?
Options
- AAuthentication verifies the identity of a person accessing a network, and authorization determines
- BAuthentication is used to record what resource a user accesses, and authorization is used to
- CAuthentication is used to determine what resources a user is allowed to access, and authorization
- DAuthentication is used to verify a person's identity, and authorization is used to create syslog
How the community answered
(47 responses)- A87% (41)
- B4% (2)
- C2% (1)
- D6% (3)
Why each option
Authentication verifies a user's identity, while authorization determines the specific network resources and actions that authenticated user is permitted to access.
Authentication is the process of verifying a user's identity (e.g., via username and password) to confirm they are who they claim to be. Once authenticated, authorization then determines precisely what actions or resources that specific user is permitted to access within the network.
This option incorrectly swaps the definitions, stating authentication records access and authorization verifies identity.
This option also incorrectly swaps the definitions, stating authentication determines resources and authorization verifies identity.
Authorization determines access rights, not the creation of syslog messages, although access events may trigger syslog messages.
Concept tested: Authentication vs. Authorization
Source: https://www.cisco.com/c/en/us/about/security-center/authentication-authorization-accounting.html
Topics
Community Discussion
No community discussion yet for this question.