CV0-002 · Question #597
A user recently requested access to a new SaaS-based application and three optional modules. Upon logging into the system, the user notices that a particular module cannot be accessed. Which of the fo
The correct answer is C. Authorization issue. If a user can log into a SaaS application but cannot access a specific module, the most probable cause is an authorization issue, meaning they lack the necessary permissions.
Question
A user recently requested access to a new SaaS-based application and three optional modules. Upon logging into the system, the user notices that a particular module cannot be accessed. Which of the following is the MOST likely cause of the problem?
Options
- AAuthentication issue
- BCertificate issue
- CAuthorization issue
- DProxy issue
How the community answered
(32 responses)- A3% (1)
- B3% (1)
- C94% (30)
Why each option
If a user can log into a SaaS application but cannot access a specific module, the most probable cause is an authorization issue, meaning they lack the necessary permissions.
An authentication issue would prevent the user from logging into the system at all, which contradicts the scenario where the user successfully logged in.
A certificate issue would typically prevent secure communication or initial access to the application, not granular access to a module after a successful login.
An authorization issue occurs when a user successfully authenticates (logs in) but does not possess the specific permissions or roles required to access a particular resource, such as an optional module within a SaaS application. The system has confirmed their identity but denies access based on their assigned privileges.
A proxy issue might prevent access to the application entirely or interfere with network requests, but it wouldn't selectively deny access to a specific module after a successful login to the application itself.
Concept tested: Authentication vs. Authorization Distinction
Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-vs-authorization
Topics
Community Discussion
No community discussion yet for this question.