nerdexam
GIAC

GSEC · Question #287

Which of the following processes Is used to prove a user Is who they claim to be based upon something they know, have, are, and/or their physical location?

The correct answer is D. Authentication. Authentication is the process of verifying that a user is who they claim to be using one or more factors - something you know, have, are, or where you are.

Access Control and Password Management

Question

Which of the following processes Is used to prove a user Is who they claim to be based upon something they know, have, are, and/or their physical location?

Options

  • AAuthorization
  • BAccounting
  • CAdministration
  • DAuthentication
  • EIdentification

How the community answered

(44 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    9% (4)
  • D
    82% (36)
  • E
    5% (2)

Why each option

Authentication is the process of verifying that a user is who they claim to be using one or more factors - something you know, have, are, or where you are.

AAuthorization

Authorization determines what resources or actions an already-authenticated user is permitted to access, not whether their claimed identity is valid.

BAccounting

Accounting (or auditing) records and tracks user activities and resource usage after authentication and authorization have occurred.

CAdministration

Administration refers to the management and configuration of systems and user accounts, not the process of verifying identity.

DAuthenticationCorrect

Authentication specifically addresses identity verification by validating credentials across the four recognized factor categories: knowledge factors (passwords/PINs), possession factors (smart cards/tokens), inherence factors (biometrics), and location factors (geolocation). This directly matches the question's description of proving identity based on know, have, are, and/or physical location.

EIdentification

Identification is the act of claiming an identity (e.g., entering a username), but it does not involve proving or verifying that the claim is legitimate.

Concept tested: Authentication factors and identity verification process

Source: https://csrc.nist.gov/glossary/term/authentication

Topics

#authentication#AAA#identity verification#multi-factor

Community Discussion

No community discussion yet for this question.

Full GSEC Practice