(ISC)2(ISC)2
SSCP · Question #1104
SSCP Question #1104: Real Exam Question with Answer & Explanation
The correct answer is B: Authentication. The question "Is the person who is attempting to log on really who they say they are?" directly addresses Authentication, which is the process of verifying a user's identity.
Submitted by mike_84· Apr 18, 2026Access Controls
Question
Is the person who is attempting to log on really who they say they are? What form of access control does this questions stem from?
Options
- AAuthorization
- BAuthentication
- CKerberos
- DMandatory Access Control
Explanation
The question "Is the person who is attempting to log on really who they say they are?" directly addresses Authentication, which is the process of verifying a user's identity.
Common mistakes.
- A. Authorization determines what an authenticated user is permitted to do or access, rather than verifying their identity.
- C. Kerberos is an authentication protocol, but 'Authentication' is the broader concept describing the identity verification process itself.
- D. Mandatory Access Control (MAC) is a type of access control model where access rights are governed by system-wide rules and security labels, not the initial identity verification process.
Concept tested. Authentication vs Authorization
Reference. https://learn.microsoft.com/en-us/windows/win32/secauthn/authentication
Topics
#Authentication#Access Control#Identification#Security Fundamentals
Community Discussion
No community discussion yet for this question.