nerdexam
EXIN

ISFS · Question #30

Logging in to a computer system is an access-granting process consisting of three steps: identification, authentication and authorization. What occurs during the first step of this process…

The correct answer is B. The first step consists of checking if the user appears on the list of authorized users. Identification is simply the act of claiming an identity - the user presents who they say they are (typically a username), and the system checks whether that identity exists in its list of known users. Option B is correct because before anything else can happen, the system must…

Access control

Question

Logging in to a computer system is an access-granting process consisting of three steps:

identification, authentication and authorization. What occurs during the first step of this process:

identification?

Options

  • AThe first step consists of checking if the user is using the correct certificate.
  • BThe first step consists of checking if the user appears on the list of authorized users.
  • CThe first step consists of comparing the password with the registered password.
  • DThe first step consists of granting access to the information to which the user is authorized.

How the community answered

(45 responses)
  • A
    4% (2)
  • B
    84% (38)
  • C
    9% (4)
  • D
    2% (1)

Explanation

Identification is simply the act of claiming an identity - the user presents who they say they are (typically a username), and the system checks whether that identity exists in its list of known users. Option B is correct because before anything else can happen, the system must confirm the claimed identity is recognized.

  • A is wrong - checking a certificate is part of authentication (proving who you are), not identification.
  • C is wrong - comparing passwords is also authentication, the second step.
  • D is wrong - granting access to resources is authorization, the third and final step.

Memory tip: Think of the three steps in order - Identify → Authenticate → Authorize (I-A-A). Identification just answers "Do we know you?" with a yes/no, nothing more.

Topics

#identification#authentication#authorization#access control process

Community Discussion

No community discussion yet for this question.

Full ISFS Practice