Question
A user is logged in but unable to access a shared folder on the network. Which of the following security concepts is in place?
- A. Authentication
- B. Authorization Correct
- C. Accounting
- D. Non-repudiation
Explanation
The user has already proven their identity by logging in, which is authentication. Being denied the shared folder is authorization: the permissions decide what an authenticated user may access. Accounting records what users do, and non-repudiation proves that a user cannot deny an action.
