nerdexam
(ISC)2

CGRC · Question #248

What is verifying the identity of a user, process, or device, often as a prerequisite to allowing access to resources in an information system. Response:

The correct answer is A. Authentication. Authentication is the process of verifying the claimed identity of a user, process, or device before granting access to resources within an information system. It ensures that the entity attempting access is who or what it claims to be.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

What is verifying the identity of a user, process, or device, often as a prerequisite to allowing access to resources in an information system. Response:

Options

  • AAuthentication
  • BOrganizational
  • CCategorization
  • DVerification

How the community answered

(37 responses)
  • A
    92% (34)
  • C
    5% (2)
  • D
    3% (1)

Why each option

Authentication is the process of verifying the claimed identity of a user, process, or device before granting access to resources within an information system. It ensures that the entity attempting access is who or what it claims to be.

AAuthenticationCorrect

Authentication is the process of verifying the identity of a subject (such as a user, process, or device) seeking access to an information system or its resources. This step typically follows identification (claiming an identity) and precedes authorization (determining what the authenticated entity is allowed to do). Common methods include passwords, biometrics, and security tokens.

BOrganizational

Organizational refers to an entity or structure, not a security process for identity verification.

CCategorization

Categorization is the process of classifying information or systems based on their sensitivity or criticality, not verifying identity.

DVerification

Verification is a broad term for checking accuracy or truth, but in the context of access control and identity, 'authentication' is the specific technical term for verifying a claimed identity.

Concept tested: Definition of authentication

Source: https://csrc.nist.gov/glossary/term/authentication

Topics

#Authentication#Identity Verification#Access Control#Security Controls

Community Discussion

No community discussion yet for this question.

Full CGRC Practice