nerdexam
(ISC)2

CCSP · Question #289

When a user accesses a system, what process determines the roles and privileges that user is granted within the application? Response:

The correct answer is A. Authorization. Authorization is the process that determines what actions an authenticated user is permitted to perform within a system based on predefined roles and privileges.

Submitted by yuriko_h· Apr 18, 2026Cloud Application Security

Question

When a user accesses a system, what process determines the roles and privileges that user is granted within the application? Response:

Options

  • AAuthorization
  • BAuthentication
  • CProvisioning
  • DPrivilege

How the community answered

(18 responses)
  • A
    94% (17)
  • D
    6% (1)

Why each option

Authorization is the process that determines what actions an authenticated user is permitted to perform within a system based on predefined roles and privileges.

AAuthorizationCorrect

Authorization is the process of determining what a verified user is permitted to do or access in a system based on predefined rules, roles, and policies. It grants specific privileges and permissions to authenticated users.

BAuthentication

Authentication is the process of verifying a user's identity, confirming that they are who they claim to be, which typically precedes authorization.

CProvisioning

Provisioning is the process of setting up or enabling a user account and assigning initial resources or access, often done before a user attempts to access the system.

DPrivilege

Privilege refers to a specific right or permission granted to a user or process, but it is an outcome or component of authorization, not the process itself.

Concept tested: Authorization vs. Authentication

Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/authentication-authorization-overview

Topics

#Authorization#Access Control#IAM#Roles and Privileges

Community Discussion

No community discussion yet for this question.

Full CCSP Practice