Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityMedium
A healthcare organization is subject to strict regulations regarding patient data. They need a system to ensure that when a patient requests their medical records, the system can verify the patient's identity and provide access, while also preventing unauthorized individuals from accessing the data. Which identity concept is primarily described by the ability to confirm the user's identity?
- AAuditing
- BAuthentication
- CAuthorization
- DAccess Control
Show answer & explanationAnswer & explanation
Correct answer: B. Authentication
Authentication is the process of verifying the identity of a user or system. The scenario explicitly mentions the need to 'verify the patient's identity', which is the core function of authentication.
Why the other options are wrong
- A. Auditing involves recording actions for review, not verifying identity.
- C. Authorization determines what an authenticated user can do, not who they are.
- D. Access Control is a broader concept that includes authentication and authorization, but 'verifying identity' is specific to authentication.
Authentication
The process of verifying the identity of a user, system, or entity trying to access a resource.
- Answers the question 'Are you who you say you are?'.
- Typically involves credentials like passwords, biometrics, or tokens.
- Precedes authorization.
Memory trick: Authentication Asks, 'Are You Really You?'