You are creating an application using .NET Framework 4.0. In the application, which of the following will you use to determine whether or not a principal is allowed to perform a requested action?

The correct answer is D. Authorization. Authorization determines whether or not a principal is allowed to perform a requested action. It occurs after authentication. Authorization is a process that verifies whether a user has permission to access a Web resource. A Web server can restrict access to some of its resources

Understanding .NET Framework Concepts

Question

Options

AAuthentication
BPrincipal
CSecurity policy
DAuthorization

How the community answered

(28 responses)

A
11% (3)
B
4% (1)
C
7% (2)
D
79% (22)

Explanation

Authorization determines whether or not a principal is allowed to perform a requested action. It occurs after authentication. Authorization is a process that verifies whether a user has permission to access a Web resource. A Web server can restrict access to some of its resources to only those clients that log in using a recognized username and password. To be authorized, a user must first be authenticated. Answer: A is incorrect. Authentication discovers and verifies the identity of a principal. It examines and validates a user's credentials. Answer: B is incorrect. A principal represents the identity and role of a user. Answer: C is incorrect. A security policy is a configurable set of rules. It programmatically generates granted permissions.

Topics

#authorization#authentication#security policy#principal

Community Discussion

No community discussion yet for this question.

Full 98-372 Practice