Which security function decides what an authenticated user is allowed to do?
Answer
Authorization
Explanation
### Why this is right
Authorization determines the actions and resources an identified user may access. It follows authentication, which establishes who the user is.
### The concept
A system may authenticate a person successfully but still deny access to a particular file. Auditing records what actions occurred, while confidentiality is the goal of restricting information access.
### The other options
- **Authentication**: establishes identity, not permitted actions.
- **Auditing**: records activity after or during use.
- **Confidentiality**: a security goal, not the permission decision itself.
### Terms
- **Authorization**: deciding which actions an authenticated identity may perform.
- **Authentication**: establishing a claimed identity.
- **Auditing**: recording or reviewing system activity.
### Remember
Authentication asks who you are; authorization asks what you may do.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free