In most organizations, access to the computer or the network is granted only after the user has entered a correct username and password. This process consists of 3 steps: identification…

Question

Options

• AIn the second step, you make your identity known, which means you are given access to the system.
• BThe authentication step checks the username against a list of users who have access to the system.
• CThe system determines whether access may be granted by determining whether the token used is
• DDuring the authentication step, the system gives you the rights that you need, such as being able to read

• A
  2% (1)
• B
  5% (3)
• C
  82% (46)
• D
  11% (6)

Explanation

Authentication is about proving you are who you claim to be. Option C is correct because the authentication step verifies the credential (the "token" - in this case, a password) to confirm the claimed identity is genuine. It's the system asking "Can you prove it?" by validating the secret only the real user should know.

Why the distractors are wrong:

• A describes identification (step 1) - declaring your identity via username, not proving it.
• B also describes identification - checking a username against a user list is recognizing who you claim to be, not verifying that claim.
• D describes authorization (step 3) - assigning rights and permissions happens after your identity is confirmed.

Memory tip: Use the airport analogy - Identification is showing your passport (username), Authentication is the agent verifying it's real (password check), Authorization is being allowed into the departure lounge (access rights). The three steps always flow in that order: IAA.

No community discussion yet for this question.