nerdexam
GIAC

GSNA · Question #16

Which of the following mechanisms is closely related to authorization?

The correct answer is B. Allowing access to a particular resource. Authorization is a process that verifies whether a user has permission to access a Web resource. A Web server can restrict access to some of its resources to only those clients that log in using a recognized username and password. To be authorized, a user must first be…

Audit Fundamentals & Planning

Question

Which of the following mechanisms is closely related to authorization?

Options

  • ASending secret data such as credit card information.
  • BAllowing access to a particular resource.
  • CVerifying username and password.
  • DSending data so that no one can alter it on the way.

How the community answered

(50 responses)
  • A
    2% (1)
  • B
    76% (38)
  • C
    14% (7)
  • D
    8% (4)

Explanation

Authorization is a process that verifies whether a user has permission to access a Web resource. A Web server can restrict access to some of its resources to only those clients that log in using a recognized username and password. To be authorized, a user must first be authenticated. Answer: C is incorrect. Verifying username and password describes the mechanism of authentication. Authentication is the process of verifying the identity of a user. This is usually done using a user name and password. This process compares the provided user name and password with those stored in the database of an authentication server. Answer: D is incorrect. Sending data so that no one can alter it on the way describes the mechanism of data integrity. Data integrity is a mechanism that ensures that the data is not modified during transmission from source to destination. This means that the data received at the destination should be exactly the same as that sent from the source. Answer: A is incorrect. Sending secret data such as credit card information describes the mechanism of confidentiality. Confidentiality is a mechanism that ensures that only the intende A, Duthorized recipients are able to read data. The data is so encrypted that even if an unauthorized user gets access to it, he will not get any meaning out of it.

Topics

#authorization#access control#authentication vs authorization#security concepts

Community Discussion

No community discussion yet for this question.

Full GSNA Practice