SY0-301 · Question #760
Which of the following is the difference between identification and authentication of a user?
The correct answer is B. Identification tells who the user is and authentication proves it. Identification is the act of a user claiming an identity (e.g., providing a username), while authentication is the process of verifying and proving that claim (e.g., providing a matching password).
Question
Which of the following is the difference between identification and authentication of a user?
Options
- AIdentification tells who the user is and authentication tells whether the user is allowed to
- BIdentification tells who the user is and authentication proves it.
- CIdentification proves who the user is and authentication is used to keep the users data
- DIdentification proves who the user is and authentication tells the user what they are allowed
How the community answered
(38 responses)- A8% (3)
- B87% (33)
- C3% (1)
- D3% (1)
Why each option
Identification is the act of a user claiming an identity (e.g., providing a username), while authentication is the process of verifying and proving that claim (e.g., providing a matching password).
Determining what a user is allowed to do is the function of authorization, which is the third component of AAA and is separate from both identification and authentication.
In the AAA (Authentication, Authorization, Accounting) model, identification is the first step where a user asserts who they are - typically by providing a username or ID. Authentication is the subsequent step that validates that claim by requiring the user to present credentials that only the true owner should possess, such as a password, token, or biometric. The distinction is between claiming an identity and proving it.
Identification does not prove who the user is - it only asserts or claims an identity; proof is the role of authentication, making this answer a reversal of the correct definitions.
Informing a user of their permissions is again the function of authorization, not authentication; this answer incorrectly assigns an authorization role to the authentication step.
Concept tested: Identification versus authentication in AAA model
Source: https://pages.nist.gov/800-63-3/sp800-63-3.html
Topics
Community Discussion
No community discussion yet for this question.