nerdexam
(ISC)2

CCSP · Question #546

Which process serves to prove the identity and credentials of a user requesting access to an application or data?

The correct answer is B. Authentication. Authentication (B) is the process of verifying that a user is who they claim to be - it proves identity and credentials (e.g., password, biometric, token) before granting access. Why the others are wrong: A. Repudiation refers to a user denying they performed an action - it's a t

Submitted by stefanr· Apr 18, 2026Cloud Concepts, Architecture and Design

Question

Which process serves to prove the identity and credentials of a user requesting access to an application or data?

Options

  • ARepudiation
  • BAuthentication
  • CIdentification
  • DAuthorization

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    91% (42)
  • C
    4% (2)
  • D
    2% (1)

Explanation

Authentication (B) is the process of verifying that a user is who they claim to be - it proves identity and credentials (e.g., password, biometric, token) before granting access.

Why the others are wrong:

  • A. Repudiation refers to a user denying they performed an action - it's a threat, not an access control process.
  • C. Identification is just claiming an identity (e.g., entering a username), without any proof - it's the step before authentication.
  • D. Authorization happens after authentication and determines what an authenticated user is allowed to do, not who they are.

Memory tip: Think AutheNtication = kNow who you are, AuthoriZation = what you're alloZed to do. The "N" vs "Z" helps keep the two most commonly confused terms straight.

Topics

#Authentication#Identity and Access Management#Security Fundamentals#Access Control

Community Discussion

No community discussion yet for this question.

Full CCSP Practice