nerdexam
(ISC)2

CISSP · Question #483

Which of the following is the MOST important action regarding authentication?

The correct answer is B. Enrolling in the system. Authentication is the process of verifying identity, and the foundational action that enables authentication is enrolling (registering) an identity in the system. Without enrollment, there is no credential or identity record to authenticate against.

Submitted by tunde_lagos· Mar 5, 2026Identity and Access Management

Question

Which of the following is the MOST important action regarding authentication?

Options

  • AGranting access rights
  • BEnrolling in the system
  • CEstablishing audit controls
  • DObtaining executive authorization

How the community answered

(35 responses)
  • B
    91% (32)
  • C
    3% (1)
  • D
    6% (2)

Why each option

Authentication is the process of verifying identity, and the foundational action that enables authentication is enrolling (registering) an identity in the system. Without enrollment, there is no credential or identity record to authenticate against.

AGranting access rights

Granting access rights is an authorization action - it determines what an authenticated identity is permitted to do - which is a separate process that occurs after authentication, not part of authentication itself.

BEnrolling in the systemCorrect

Enrolling in the system is the most important action regarding authentication because it establishes the identity credential (e.g., username, password, biometric, certificate) within the identity store. Without this enrollment step, no authentication mechanism can function, as there is no registered identity to verify against. Enrollment is the prerequisite that makes all subsequent authentication possible.

CEstablishing audit controls

Establishing audit controls relates to the accounting or auditing component of the AAA (Authentication, Authorization, and Accounting) framework, not the authentication process itself.

DObtaining executive authorization

Obtaining executive authorization is an administrative or governance step related to policy approval, not a technical action within the authentication process.

Concept tested: Authentication process and identity enrollment fundamentals

Source: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/identity-fundamental-concepts

Topics

#Authentication process#User provisioning#Identity lifecycle#Enrollment

Community Discussion

No community discussion yet for this question.

Full CISSP Practice