Which statement correctly describes Authentication and Authorization?

Which statement correctly describes Authentication and Authorization?

• A. Authentication is the process of verifying the identity of a user.
• B. Authentication is the process of verifying the identity of a user and authorization is the process that determines if authenticated users can access specific resources.
• C. Authentication is a set of data that uniquely describes an object, device or user.
• D. Authorization identifies the requestor

Answer: (B)

Authentication is about confirming who you are. When you log in with a username and password, the system checks that the credentials match, which is authentication. Authorization comes after that, deciding what you are allowed to do once your identity is known. It answers whether the authenticated user has permission to access a particular resource or perform a specific action. The statement that correctly describes both is that authentication verifies identity and authorization determines if the authenticated user can access specific resources. This reflects the typical sequence: first verify who you are, then check what you’re allowed to do. The other options mix up the concepts or describe the data involved rather than the processes: one focuses only on verifying identity, another treats authentication as a data set rather than a process, and another incorrectly says authorization identifies the requester.

Authentication is about confirming who you are. When you log in with a username and password, the system checks that the credentials match, which is authentication. Authorization comes after that, deciding what you are allowed to do once your identity is known. It answers whether the authenticated user has permission to access a particular resource or perform a specific action. The statement that correctly describes both is that authentication verifies identity and authorization determines if the authenticated user can access specific resources. This reflects the typical sequence: first verify who you are, then check what you’re allowed to do. The other options mix up the concepts or describe the data involved rather than the processes: one focuses only on verifying identity, another treats authentication as a data set rather than a process, and another incorrectly says authorization identifies the requester.