CCSP · Question #328
What is the major difference between authentication/authorization? Response:
The correct answer is B. Identity validation/access permission. Authentication verifies a user's identity ('who you are'), while authorization determines what actions that authenticated user is permitted to perform ('what you can do').
Question
What is the major difference between authentication/authorization? Response:
Options
- ACode verification/code implementation
- BIdentity validation/access permission
- CInverse incantation/obverse instantiation
- DUser access/privileged access
How the community answered
(46 responses)- A2% (1)
- B91% (42)
- C4% (2)
- D2% (1)
Why each option
Authentication verifies a user's identity ('who you are'), while authorization determines what actions that authenticated user is permitted to perform ('what you can do').
Code verification/code implementation relates to software development and security, not the core concepts of authentication and authorization.
Authentication is the process of verifying the identity of a user, system, or process, often through credentials like usernames and passwords or multifactor authentication. Authorization, on the other hand, occurs after successful authentication and determines what resources an authenticated entity is permitted to access and what operations it is allowed to perform on those resources.
'Inverse incantation/obverse instantiation' are nonsensical terms and bear no relation to authentication or authorization.
User access/privileged access are types of access levels, which are determined by authorization, but they do not define the fundamental difference between authentication and authorization processes themselves.
Concept tested: Authentication vs. Authorization
Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-vs-authorization
Topics
Community Discussion
No community discussion yet for this question.