nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #743

Which component of IAAA ensures that users are granted access to resources based on their established identity?

The correct answer is C. Authorization. IAAA stands for Identification, Authentication, Authorization, and Accountability. Each step builds on the previous: Identification (B) is claiming an identity (e.g., entering a username). Authentication (A) is proving that identity (e.g., entering a password). Authorization…

Access Controls Concepts

Question

Which component of IAAA ensures that users are granted access to resources based on their established identity?

Options

  • AAuthentication
  • BIdentification
  • CAuthorization
  • DAccountability

How the community answered

(27 responses)
  • B
    4% (1)
  • C
    93% (25)
  • D
    4% (1)

Explanation

IAAA stands for Identification, Authentication, Authorization, and Accountability. Each step builds on the previous: Identification (B) is claiming an identity (e.g., entering a username). Authentication (A) is proving that identity (e.g., entering a password). Authorization (C) is the step that grants or restricts access to specific resources based on the verified identity - answering 'what is this user allowed to do?' Accountability (D) tracks and logs actions taken. The question asks which component grants access based on established identity, which is specifically Authorization - it happens after identity is both claimed and proven.

Topics

#Access Control#Authorization#IAAA#Security Principles

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice