nerdexam
CompTIA

SY0-501 · Question #526

Which of the following is the proper order for logging a user into a system from the first step to the last step?

The correct answer is A. Identification, authentication, authorization. The proper sequence for logging a user into a system begins with the user identifying themselves, followed by the system authenticating their identity, and finally determining their access permissions through authorization.

Submitted by rania.sa· Mar 4, 2026General security concepts

Question

Which of the following is the proper order for logging a user into a system from the first step to the last step?

Options

  • AIdentification, authentication, authorization
  • BIdentification, authorization, authentication
  • CAuthentication, identification, authorization
  • DAuthentication, identification, authorization
  • EAuthorization, identification, authentication

How the community answered

(24 responses)
  • A
    75% (18)
  • C
    4% (1)
  • D
    8% (2)
  • E
    13% (3)

Why each option

The proper sequence for logging a user into a system begins with the user identifying themselves, followed by the system authenticating their identity, and finally determining their access permissions through authorization.

AIdentification, authentication, authorizationCorrect

First, Identification occurs where the user provides a unique identifier (like a username). Second, Authentication verifies the user's claimed identity, typically with a password or other credentials. Lastly, Authorization grants the authenticated user specific permissions to resources based on their assigned roles or policies.

BIdentification, authorization, authentication

Authorization cannot occur before authentication, as the system must first confirm the user's identity before determining what they are allowed to do.

CAuthentication, identification, authorization

Authentication cannot occur before identification because the system needs a claimed identity from the user to verify against.

DAuthentication, identification, authorization

This option presents the same incorrect order as C; authentication cannot occur before identification because the system needs a claimed identity from the user to verify against.

EAuthorization, identification, authentication

Authorization is the final step in the process, not the first, as access cannot be granted without first knowing and verifying who the user is.

Concept tested: User identification, authentication, and authorization order

Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/authentication-authorization-identification

Topics

#identification#authentication#authorization#access control

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice