Information Security Principles And Frameworks Practice Test

What process determines what rights and privileges an entity has?

Authentication Identification Accounting Authorization

Correct Answer:

Authorization

Explanation:

Authorization determines what rights and privileges an entity has. It happens after authentication, when the system applies policies to decide what a user or process is allowed to do with resources. In practice, once identity is verified, the system checks roles, attributes, or rules (such as ACLs or RBAC) to grant or deny specific actions like read, write, or execute. This separation matters: authentication verifies who you are, identification is the claimed identity, and accounting logs what you did. For example, after logging in (authentication), a user’s role is consulted to determine if they can access a file or perform a change (authorization).

Access more questions from this quiz

Continue to Information Security Principles and Frameworks Practice Test for more practice questions and the full quiz experience.

Access More Questions