nerdexam
(ISC)2

SSCP · Question #1280

_______ and ________ are the primary controls of most access control systems.<br>(Choose two)

The correct answer is D. Identification E. Authentication. The foundational primary controls for most access control systems are identification, where users declare who they are, and authentication, where their declared identity is verified.

Submitted by miguelv· Apr 18, 2026Access Controls

Question

_______ and ________ are the primary controls of most access control systems.<br>(Choose two)

Options

  • ATickets
  • BBiometrics
  • CAuthorization
  • DIdentification
  • EAuthentication

How the community answered

(31 responses)
  • B
    6% (2)
  • C
    3% (1)
  • D
    90% (28)

Why each option

The foundational primary controls for most access control systems are identification, where users declare who they are, and authentication, where their declared identity is verified.

ATickets

Tickets are often used in specific authentication systems (like Kerberos) but are not primary controls themselves; they are tokens.

BBiometrics

Biometrics is a method of authentication, not a primary control category itself.

CAuthorization

Authorization determines what an authenticated user can do, which comes after identification and authentication in the access control process.

DIdentificationCorrect

Identification is the process by which a user claims an identity to the system.

EAuthenticationCorrect

Authentication is the process of verifying the claimed identity, ensuring the user is who they say they are.

Concept tested: Identification and Authentication as primary access controls

Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/identity-access-management

Topics

#Access Control#Identification#Authentication#Security Concepts

Community Discussion

No community discussion yet for this question.

Full SSCP Practice