The Three Processes in access control are described as working how?

The Three Processes in access control are described as working how?

• A. They work sequentially to ensure the services are not misused
• B. They are independent
• C. They are only used during maintenance
• D. They are used to monitor performance

Answer: (A)

The three processes used in access control—authentication, authorization, and accounting—are described as working sequentially. You first verify who is trying to access a resource (authentication). Only after identity is established do you decide what that user is allowed to do (authorization). After access is granted and actions occur, you record what happened (accounting) for auditing and accountability. This sequence matters because you can’t grant permissions to someone whose identity isn’t confirmed, and you need to track the actions that were performed for security and compliance. The idea that these processes are independent isn’t accurate, since each step depends on the previous one: you can’t authorize without authentication, and you can’t account for actions without them occurring. They aren’t restricted to maintenance windows, and while accounting involves logging usage, the core purpose isn’t monitoring performance but maintaining auditability of access and actions.

The three processes used in access control—authentication, authorization, and accounting—are described as working sequentially. You first verify who is trying to access a resource (authentication). Only after identity is established do you decide what that user is allowed to do (authorization). After access is granted and actions occur, you record what happened (accounting) for auditing and accountability. This sequence matters because you can’t grant permissions to someone whose identity isn’t confirmed, and you need to track the actions that were performed for security and compliance.

The idea that these processes are independent isn’t accurate, since each step depends on the previous one: you can’t authorize without authentication, and you can’t account for actions without them occurring. They aren’t restricted to maintenance windows, and while accounting involves logging usage, the core purpose isn’t monitoring performance but maintaining auditability of access and actions.