SY0-501 · Question #526
Which of the following is the proper order for logging a user into a system from the first step to the last step?
The correct answer is A. Identification, authentication, authorization. The proper sequence for logging a user into a system begins with the user identifying themselves, followed by the system authenticating their identity, and finally determining their access permissions through authorization.
Question
Which of the following is the proper order for logging a user into a system from the first step to the last step?
Options
- AIdentification, authentication, authorization
- BIdentification, authorization, authentication
- CAuthentication, identification, authorization
- DAuthentication, identification, authorization
- EAuthorization, identification, authentication
How the community answered
(24 responses)- A75% (18)
- C4% (1)
- D8% (2)
- E13% (3)
Why each option
The proper sequence for logging a user into a system begins with the user identifying themselves, followed by the system authenticating their identity, and finally determining their access permissions through authorization.
First, Identification occurs where the user provides a unique identifier (like a username). Second, Authentication verifies the user's claimed identity, typically with a password or other credentials. Lastly, Authorization grants the authenticated user specific permissions to resources based on their assigned roles or policies.
Authorization cannot occur before authentication, as the system must first confirm the user's identity before determining what they are allowed to do.
Authentication cannot occur before identification because the system needs a claimed identity from the user to verify against.
This option presents the same incorrect order as C; authentication cannot occur before identification because the system needs a claimed identity from the user to verify against.
Authorization is the final step in the process, not the first, as access cannot be granted without first knowing and verifying who the user is.
Concept tested: User identification, authentication, and authorization order
Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/authentication-authorization-identification
Topics
Community Discussion
No community discussion yet for this question.