CompTIA A+ Core 2 (220-1202)SecurityEasy
A user enters a username and password to log into a network. After the system confirms the credentials are valid, it checks which files and folders the user is permitted to access. What is this second step called?
- AAuthentication
- BAccounting
- CAuthorization
- DNon-repudiation
Show answer & explanationAnswer & explanation
Correct answer: C. Authorization
In the AAA framework, authentication verifies who the user is, while authorization determines what resources that verified user is allowed to access. Accounting tracks usage after access is granted.
Why the other options are wrong
- A. Authentication is the first step, confirming identity via credentials.
- B. Accounting logs and tracks resource usage, occurring after authorization.
- D. Non-repudiation ensures a user cannot deny an action, not related to permission checks.
AAA Framework
Authentication, Authorization, and Accounting: a security model that verifies identity, grants appropriate access, and logs activity.
- Authentication = who you are
- Authorization = what you can do
- Accounting = tracking what was done
Memory trick: 'Who, What, Wrote it down' = Authenticate, Authorize, Account.