Authorization vs Authentication in Network Access Control

Summarize fundamental security concepts.
Answer Correct answer: A — Authorization is the process of granting access to resources after a user has been authenticated.

Which of the following security concepts is accomplished when granting access after an individual has logged into a computer network?

  1. Authorization Correct Answer
  2. Identification
  3. Non-repudiation
  4. Authentication

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The core concept tested is the sequence of security controls: Identification claims identity, Authentication verifies it, and Authorization determines permitted actions.

This question tests the distinction between authentication and authorization. The correct answer is Authorization (A), which grants specific access rights after a user has successfully logged in.

Many candidates incorrectly select Authentication (D) because they associate 'logging in' with verification, failing to recognize that the question asks about granting access *after* login.

Community Discussion (4 comments)

NadirM_18 👍 1 Selected: A
Authentication before Authorization. By successfully logging in, you have already authenticated. Authorization will then determine what you have access to.
Anyio 👍 2 Selected: A
Answer: A. Authorization Authorization is the security concept accomplished when granting access to resources or actions after an individual has logged into a computer network. It determines what the user is allowed to do based on their permissions and privileges. Why the other options are not correct: B. Identification Identification is the process of claiming an identity, such as providing a username. It occurs before authentication and does not involve granting access to resources. C. Non-repudiation Non-repudiation ensures that a user cannot deny having performed an action, typically through mechanisms like digital signatures or logs. It is unrelated to granting access after login. D. Authentication Authentication is the process of verifying the identity of a user, such as through passwords, biometrics, or tokens. It occurs before authorization and does not involve granting access to resources.
admcdaniel 👍 1 Selected: D
D. The user has been authenticated to the network by simply logging in
jennyka76 👍 3 Selected: A
Authorization: This is the process of determining what level of access a user has been granted based on their credentials and role, meaning the system checks if they are allowed to access specific resources once authenticated.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Authorization (A) is the process of determining what level of access a user has been granted based on their credentials and role. Once an individual logs into a network (authentication), the system checks if they are allowed to access specific resources or perform certain actions. This step is distinct from verifying who the user is.

Why the Other Options Are Wrong

Identification (B) is the act of claiming an identity (e.g., providing a username). Authentication (D) is the verification of that identity (e.g., password check); since the prompt states the individual has already logged in, authentication is complete. Non-repudiation (C) ensures a user cannot deny having performed an action, which is unrelated to initial access granting.

Community Comment Notes

Community members generally agree that Authorization follows Authentication. One commenter noted, "Authentication before Authorization. By successfully logging in, you have already authenticated." Another emphasized that Authorization "determines what the user is allowed to do based on their permissions," aligning with the definition of granting access post-login.

Exam Strategy

Always distinguish between the act of logging in (Authentication) and the permissions granted upon entry (Authorization). If the scenario mentions checking rights or privileges after identity verification, choose Authorization.

Frequently Asked Questions

Why isn't Authentication the answer if the user just logged in?

Logging in completes Authentication. The question asks about granting access rights after this step, which is the function of Authorization.

What is the difference between Identification and Authentication?

Identification is claiming an identity (username), while Authentication is proving it (password/biometrics). Authorization comes next.

More SY0-701 FAQ →

Related Analysis

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide