Authorization vs Authentication in Network Access Control

SY0-701 By islever Editorial Last updated

Summarize fundamental security concepts.

Short answer

A Authorization is the process of granting access to resources after a user has been authenticated.

Question

Which of the following security concepts is accomplished when granting access after an individual has logged into a computer network?
  1. Authorization Correct Answer
  2. Identification
  3. Non-repudiation
  4. Authentication

Key Takeaways

The core concept tested is the sequence of security controls: Identification claims identity, Authentication verifies it, and Authorization determines permitted actions.

This question tests the distinction between authentication and authorization. The correct answer is Authorization (A), which grants specific access rights after a user has successfully logged in.

Common mistake: Many candidates incorrectly select Authentication (D) because they associate 'logging in' with verification, failing to recognize that the question asks about granting access *after* login.

Expert Analysis

Why the Answer Is Correct

Authorization (A) is the process of determining what level of access a user has been granted based on their credentials and role. Once an individual logs into a network (authentication), the system checks if they are allowed to access specific resources or perform certain actions. This step is distinct from verifying who the user is.

Why the Other Options Are Wrong

Identification (B) is the act of claiming an identity (e.g., providing a username). Authentication (D) is the verification of that identity (e.g., password check); since the prompt states the individual has already logged in, authentication is complete. Non-repudiation (C) ensures a user cannot deny having performed an action, which is unrelated to initial access granting.

Community Comment Notes

Community members generally agree that Authorization follows Authentication. One commenter noted, "Authentication before Authorization. By successfully logging in, you have already authenticated." Another emphasized that Authorization "determines what the user is allowed to do based on their permissions," aligning with the definition of granting access post-login.

Exam Strategy

Always distinguish between the act of logging in (Authentication) and the permissions granted upon entry (Authorization). If the scenario mentions checking rights or privileges after identity verification, choose Authorization.

Frequently Asked Questions

Why isn't Authentication the answer if the user just logged in?

Logging in completes Authentication. The question asks about granting access rights after this step, which is the function of Authorization.

What is the difference between Identification and Authentication?

Identification is claiming an identity (username), while Authentication is proving it (password/biometrics). Authorization comes next.

More SY0-701 FAQ →

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. jennyka76 👍 3 Answered A
    Authorization: This is the process of determining what level of access a user has been granted based on their credentials and role, meaning the system checks if they are allowed to access specific resources once authenticated.
  2. Anyio 👍 2 Answered A
    Answer: A. Authorization Authorization is the security concept accomplished when granting access to resources or actions after an individual has logged into a computer network. It determines what the user is allowed to do based on their permissions and privileges. Why the other options are not correct: B. Identification Identification is the process of claiming an identity, such as providing a username. It occurs before authentication and does not involve granting access to resources. C. Non-repudiation Non-repudiation ensures that a user cannot deny having performed an action, typically through mechanisms like digital signatures or logs. It is unrelated to granting access after login. D. Authentication Authentication is the process of verifying the identity of a user, such as through passwords, biometrics, or tokens. It occurs before authorization and does not involve granting access to resources.
  3. NadirM_18 👍 1 Answered A
    Authentication before Authorization. By successfully logging in, you have already authenticated. Authorization will then determine what you have access to.
  4. admcdaniel 👍 1 Answered D
    D. The user has been authenticated to the network by simply logging in

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide