# Authentication and access control

> Verifying an asserted identity.

Course: [Cybersecurity foundations](https://studybrix.com/en/courses/cybersecurity/index.md)
Level: university
Prerequisites: Basic computer and internet literacy.

## Notes

### Authentication

Verifying an asserted identity.

### Authorization

Deciding what an authenticated identity may do.

### Multi-factor authentication

Using evidence from more than one authentication factor category.

### Least privilege

Giving only the access needed for the intended task.

## Practice questions

### 1. Which term best matches this description: Verifying an asserted identity.

A. Multi-factor authentication
B. Least privilege
C. Authentication
D. Authorization

Answer: Authentication

Explanation: Authentication is the matching concept in this lesson.

### 2. Which term best matches this description: Deciding what an authenticated identity may do.

A. Least privilege
B. Authentication
C. Authorization
D. Multi-factor authentication

Answer: Authorization

Explanation: Authorization is the matching concept in this lesson.

### 3. Which concept would you apply first in a situation where using evidence from more than one authentication factor category.

A. Least privilege
B. Multi-factor authentication
C. Authentication
D. Authorization

Answer: Multi-factor authentication

Explanation: The scenario directly calls for Multi-factor authentication.

### 4. Name the concept described as: Giving only the access needed for the intended task.

Answer: Least privilege

Explanation: The intended concept is Least privilege.

### 5. Which statement about Authentication is most accurate?

A. Verifying an asserted identity.
B. Deciding what an authenticated identity may do.
C. Giving only the access needed for the intended task.
D. Using evidence from more than one authentication factor category.

Answer: Verifying an asserted identity.

Explanation: The definition in the lesson notes gives the required condition.

### 6. Explain one important difference between Authentication and Authorization.

Sample answer / marking guidance: Authentication: Verifying an asserted identity. Authorization: Deciding what an authenticated identity may do.

Explanation: Credit a clear distinction using both definitions and an appropriate example if supplied.

### 7. Give a short example showing how Multi-factor authentication would be used in practice.

Sample answer / marking guidance: A valid example should demonstrate this idea: Using evidence from more than one authentication factor category.

Explanation: Credit a relevant scenario that applies the concept rather than merely naming it.

### 8. Summarize why Least privilege matters in the lesson “Authentication and access control”.

Sample answer / marking guidance: Least privilege matters because Giving only the access needed for the intended task.

Explanation: Credit the core purpose, scope and any important limitation from the notes.

## Further reading

- https://www.nist.gov/cyberframework

Original AI-assisted educational draft; not independently teacher-reviewed. References support further study, not copied exercises, affiliation or curriculum accreditation.