Authorization is defined as what?

Authorization is defined as what?

• A. Stores user preferences
• B. Grants permissions when identity is established and authenticated
• C. Verifies password strength
• D. Generates encryption keys

Answer: (B)

Authorization is about what actions a user is allowed to perform after their identity has been verified. Once identity is established and authenticated, the system checks permissions and access control policies to decide which resources or operations the user can access. This is why granting permissions when identity is established and authenticated best captures the concept. Storing user preferences is about data and personalization, not access rights. Verifying password strength relates to authentication, not what you can do after you’re logged in. Generating encryption keys deals with cryptography and key management, not authorization.

Authorization is about what actions a user is allowed to perform after their identity has been verified. Once identity is established and authenticated, the system checks permissions and access control policies to decide which resources or operations the user can access. This is why granting permissions when identity is established and authenticated best captures the concept.

Storing user preferences is about data and personalization, not access rights. Verifying password strength relates to authentication, not what you can do after you’re logged in. Generating encryption keys deals with cryptography and key management, not authorization.