nerdexam
CompTIA

SY0-301 · Question #438

A customer has provided an email address and password to a website as part of the login process. Which of the following BEST describes the email address?

The correct answer is A. Identification. In the authentication process, the email address serves as identification - it claims who the user is before any verification occurs.

General security concepts

Question

A customer has provided an email address and password to a website as part of the login process. Which of the following BEST describes the email address?

Options

  • AIdentification
  • BAuthorization
  • CAccess control
  • DAuthentication

How the community answered

(26 responses)
  • A
    88% (23)
  • B
    8% (2)
  • C
    4% (1)

Why each option

In the authentication process, the email address serves as identification - it claims who the user is before any verification occurs.

AIdentificationCorrect

Identification is the process of claiming an identity to a system, typically by providing a username or email address. The email address tells the system 'who I am' but provides no proof of that claim. Authentication is the subsequent step where the password is used to verify (prove) that claimed identity, making identification and authentication two distinct steps in the AAA framework.

BAuthorization

Authorization occurs after successful authentication and determines what resources or actions the authenticated user is permitted to access, not the act of submitting an identifier.

CAccess control

Access control is the broader system or policy framework that enforces authorization decisions, not a description of submitting an email address in a login form.

DAuthentication

Authentication is the verification step - in this scenario, the password (not the email address) is the authentication factor that proves the claimed identity.

Concept tested: AAA - Identification vs Authentication distinction

Source: https://learn.microsoft.com/en-us/entra/fundamentals/identity-fundamental-concepts

Topics

#identification#AAA#authentication vs identification#access control

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice