ISC2 Certified in Cybersecurity (CC)Access Controls ConceptsEasy
A new cybersecurity initiative mandates that all employees must use a unique identifier to claim their digital identity before presenting credentials. What access control concept does this requirement primarily address?
- AAuthentication
- BIdentification
- CAccountability
- DAuthorization
Show answer & explanationAnswer & explanation
Correct answer: B. Identification
Identification is the first step in the access control process, where a user claims an identity. Using a unique identifier (like a username) to claim who they are before proving it directly relates to identification.
Why the other options are wrong
- A. Authentication is proving the claimed identity, which comes after identification.
- C. Accountability tracks actions after access has been granted.
- D. Authorization determines what access rights an authenticated user has.
Identification (Access Control)
The process by which a user or entity claims an identity to a system, typically through a unique identifier like a username.
- It is the first step in the access control process.
- Establishes 'who you say you are'.
- Must precede authentication.
Memory trick: First, say who; then, prove it's you.