GSEC · Question #287
Which of the following processes Is used to prove a user Is who they claim to be based upon something they know, have, are, and/or their physical location?
The correct answer is D. Authentication. Authentication is the process of verifying that a user is who they claim to be using one or more factors - something you know, have, are, or where you are.
Question
Which of the following processes Is used to prove a user Is who they claim to be based upon something they know, have, are, and/or their physical location?
Options
- AAuthorization
- BAccounting
- CAdministration
- DAuthentication
- EIdentification
How the community answered
(44 responses)- A2% (1)
- B2% (1)
- C9% (4)
- D82% (36)
- E5% (2)
Why each option
Authentication is the process of verifying that a user is who they claim to be using one or more factors - something you know, have, are, or where you are.
Authorization determines what resources or actions an already-authenticated user is permitted to access, not whether their claimed identity is valid.
Accounting (or auditing) records and tracks user activities and resource usage after authentication and authorization have occurred.
Administration refers to the management and configuration of systems and user accounts, not the process of verifying identity.
Authentication specifically addresses identity verification by validating credentials across the four recognized factor categories: knowledge factors (passwords/PINs), possession factors (smart cards/tokens), inherence factors (biometrics), and location factors (geolocation). This directly matches the question's description of proving identity based on know, have, are, and/or physical location.
Identification is the act of claiming an identity (e.g., entering a username), but it does not involve proving or verifying that the claim is legitimate.
Concept tested: Authentication factors and identity verification process
Source: https://csrc.nist.gov/glossary/term/authentication
Topics
Community Discussion
No community discussion yet for this question.