Which of the following best ensures accountability of users for actions taken within a system or
domain?
A.
Identification
B.
Authentication
C.
Authorization
D.
Credentials
Explanation:
“Identification is the process by which a subject professes an identify and
accountability is initiated.” Pg 149 Tittel: CISSP Study Guide
“Identification and authentication are the keystones of most access control systems. Identification
is the act of a user professing an identify to a system, usually in the form of a log-on ID to the
system. Identification establishes user accountability for the actions on the system. Authentication
is verification that the user’s claimed identity is valid and is usually implemented through a user
password at log-on time.” Pg 36 Krutz: The CISSP Prep Guide
Identification only is just that: Identification. It has not much to do with accountability or actions taken until Authorization is also granted which starts tracking and accountability.
0
0