Exam SY0-701 topic 1 question 505 discussion

Authentication before Authorization. By successfully logging in, you have already authenticated. Authorization will then determine what you have access to.

Answer: A. Authorization Authorization is the security concept accomplished when granting access to resources or actions after an individual has logged into a computer network. It determines what the user is allowed to do based on their permissions and privileges. Why the other options are not correct: B. Identification Identification is the process of claiming an identity, such as providing a username. It occurs before authentication and does not involve granting access to resources. C. Non-repudiation Non-repudiation ensures that a user cannot deny having performed an action, typically through mechanisms like digital signatures or logs. It is unrelated to granting access after login. D. Authentication Authentication is the process of verifying the identity of a user, such as through passwords, biometrics, or tokens. It occurs before authorization and does not involve granting access to resources.

D. The user has been authenticated to the network by simply logging in

Authorization: This is the process of determining what level of access a user has been granted based on their credentials and role, meaning the system checks if they are allowed to access specific resources once authenticated.