Explain how authentication, authorization, and auditing differ, and describe how a failure in each could affect security.

### What a good answer covers - Authentication answers the question, “Who are you?” and checks a claimed identity. - Authorization determines what an authenticated identity can access or change. - Auditing records actions so activity can be reviewed or attributed. - Weak authentication can enable impersonation; incorrect permissions can enable unauthorized actions; missing records can hinder investigation. ### The concept These are related but separate security functions. A user can be correctly identified and still have excessive permissions. Likewise, suitable permissions do not guarantee that useful records are kept. A security design should consider all three functions. ### Terms - **Authentication**: establishing identity. - **Authorization**: assigning or checking permitted actions. - **Auditing**: recording and reviewing activity. ### Remember Identity, permissions, and evidence of activity are separate controls.