GSEC · Question #181
Which of the following statements about the authentication concept of information security management is true?
The correct answer is D. It establishes the users' identity and ensures that the users are who they say they are. Authentication is the identity verification process that confirms a user is who they claim to be before granting system access.
Question
Which of the following statements about the authentication concept of information security management is true?
Options
- AIt ensures the reliable and timely access to resources.
- BIt ensures that modifications are not made to data by unauthorized personnel or processes.
- CIt determines the actions and behaviors of a single individual within a system, and identifies that
- DIt establishes the users' identity and ensures that the users are who they say they are.
How the community answered
(17 responses)- A6% (1)
- B12% (2)
- D82% (14)
Why each option
Authentication is the identity verification process that confirms a user is who they claim to be before granting system access.
Ensuring reliable and timely access to resources describes Availability, the 'A' component of the CIA triad, not authentication.
Preventing unauthorized modifications to data describes Integrity, the 'I' component of the CIA triad, not authentication.
Tracking and identifying the actions of an individual within a system describes Accountability or Auditing, which is a separate security concept from authentication.
Authentication is defined as the process of verifying a user's identity using credentials such as passwords, tokens, or biometrics. It answers the question 'who are you?' and is distinct from authorization, which answers 'what can you do?' - making it the foundational step before any access is granted.
Concept tested: Authentication definition within CIA triad concepts
Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-vs-authorization
Topics
Community Discussion
No community discussion yet for this question.