nerdexam
(ISC)2

CGRC · Question #46

Which of the following statements about the authentication concept of information security management is true? Response:

The correct answer is C. It establishes the identity of users and ensures that the users are who they say they are. Authentication is a fundamental information security concept that validates a user's claimed identity. Its purpose is to definitively establish that individuals are who they declare themselves to be before granting access to system resources.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following statements about the authentication concept of information security management is true? Response:

Options

  • AIt determines the actions and behaviors of a single individual within a system, and identifies that
  • BIt ensures that modifications are not made to data by unauthorized personnel or processes.
  • CIt establishes the identity of users and ensures that the users are who they say they are.
  • DIt ensures the reliable and timely access to resources.

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    90% (36)
  • D
    5% (2)

Why each option

Authentication is a fundamental information security concept that validates a user's claimed identity. Its purpose is to definitively establish that individuals are who they declare themselves to be before granting access to system resources.

AIt determines the actions and behaviors of a single individual within a system, and identifies that

This describes authorization or accountability, which determines what actions an authenticated user can perform and tracks their activities, rather than establishing their initial identity.

BIt ensures that modifications are not made to data by unauthorized personnel or processes.

This describes the security principle of integrity, which focuses on preventing unauthorized modification of data.

CIt establishes the identity of users and ensures that the users are who they say they are.Correct

Authentication is the process of verifying the identity of a user, process, or device. It ensures that the entity attempting to access a system or resource is indeed the entity it claims to be, typically by verifying credentials like passwords, biometrics, or tokens.

DIt ensures the reliable and timely access to resources.

This describes the security principle of availability, which focuses on ensuring timely and reliable access to resources for authorized users.

Concept tested: Authentication concept and purpose

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/identity-concepts-authentication

Topics

#Authentication#Information Security Concepts#Identity Management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice