CISSP · Question #483
CISSP Question #483: Real Exam Question with Answer & Explanation
The correct answer is B: Enrolling in the system. Authentication is the process of verifying identity, and the foundational action that enables authentication is enrolling (registering) an identity in the system. Without enrollment, there is no credential or identity record to authenticate against.
Question
Which of the following is the MOST important action regarding authentication?
Options
- AGranting access rights
- BEnrolling in the system
- CEstablishing audit controls
- DObtaining executive authorization
Explanation
Authentication is the process of verifying identity, and the foundational action that enables authentication is enrolling (registering) an identity in the system. Without enrollment, there is no credential or identity record to authenticate against.
Common mistakes.
- A. Granting access rights is an authorization action - it determines what an authenticated identity is permitted to do - which is a separate process that occurs after authentication, not part of authentication itself.
- C. Establishing audit controls relates to the accounting or auditing component of the AAA (Authentication, Authorization, and Accounting) framework, not the authentication process itself.
- D. Obtaining executive authorization is an administrative or governance step related to policy approval, not a technical action within the authentication process.
Concept tested. Authentication process and identity enrollment fundamentals
Reference. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/identity-fundamental-concepts
Topics
Community Discussion
No community discussion yet for this question.