Which statement best distinguishes authentication from authorization?

Which statement best distinguishes authentication from authorization?

• A. Authentication verifies identity; authorization grants access based on verified identity.
• B. Authorization verifies identity; authentication grants access.
• C. Both are identical.
• D. Authentication is only for admins.

Answer: (A)

Authentication proves who you are by verifying your credentials (such as a password, biometric, or token). Authorization decides what you are allowed to do once that identity is confirmed, based on your permissions. The statement captures this sequence: authentication verifies identity, and authorization grants access based on that verified identity. For example, you sign in to prove you are you, and then the system checks whether your role lets you view or modify specific resources. The other ideas mix up the order or say they’re the same, or incorrectly limit authentication to admins, which isn’t true for typical systems.

Authentication proves who you are by verifying your credentials (such as a password, biometric, or token). Authorization decides what you are allowed to do once that identity is confirmed, based on your permissions. The statement captures this sequence: authentication verifies identity, and authorization grants access based on that verified identity. For example, you sign in to prove you are you, and then the system checks whether your role lets you view or modify specific resources. The other ideas mix up the order or say they’re the same, or incorrectly limit authentication to admins, which isn’t true for typical systems.