Which statement best describes authentication?

Which statement best describes authentication?

• A. Authorization is the sign-in process.
• B. Authentication is the sign-in process.
• C. Authentication determines what the entity can do once inside the resource.
• D. Authorization assures the identity of the user.

Answer: (B)

Authentication is the process of proving who you are, typically during sign-in, by presenting credentials that the system can verify. The statement that authentication is the sign-in process is the best description because the core action here is verifying identity as you log in. After authentication succeeds, the system uses authorization to determine what you are allowed to do, such as which resources you can access and which actions you can perform. The idea that authorization is the sign-in process confuses the two roles; sign-in is about identity verification, while authorization handles access rights. Saying authentication determines what you can do once inside the resource mixes up the steps: authentication provides the identity, but permissions are enforced by authorization. Finally, authorization does not assure identity—that’s the job of authentication.

Authentication is the process of proving who you are, typically during sign-in, by presenting credentials that the system can verify. The statement that authentication is the sign-in process is the best description because the core action here is verifying identity as you log in. After authentication succeeds, the system uses authorization to determine what you are allowed to do, such as which resources you can access and which actions you can perform. The idea that authorization is the sign-in process confuses the two roles; sign-in is about identity verification, while authorization handles access rights. Saying authentication determines what you can do once inside the resource mixes up the steps: authentication provides the identity, but permissions are enforced by authorization. Finally, authorization does not assure identity—that’s the job of authentication.