nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #688

What is authorization?

The correct answer is D. The process of granting access to resources and data. Authorization is the process of granting or denying access to specific resources, data, or functions after a user's identity has already been verified. It answers the question 'What is this user allowed to do?' Authorization is distinct from authentication (option A), which…

Access Controls Concepts

Question

What is authorization?

Options

  • AThe process of verifying a user's identity
  • BThe process of encrypting data
  • CThe process of creating a backup copy of data
  • DThe process of granting access to resources and data

How the community answered

(24 responses)
  • A
    4% (1)
  • D
    96% (23)

Explanation

Authorization is the process of granting or denying access to specific resources, data, or functions after a user's identity has already been verified. It answers the question 'What is this user allowed to do?' Authorization is distinct from authentication (option A), which verifies identity first. Encryption (B) protects data confidentiality, and backup (C) ensures data availability - neither are authorization concepts.

Topics

#Authorization#Access Control#Security Concepts#Identity and Access Management

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice