Which term describes restricting access to resources after authentication by applying policies?

Which term describes restricting access to resources after authentication by applying policies?

• A. Authorization
• B. Authentication
• C. Access Control Lists
• D. Whaling

Answer: (A)

Authorization is the process of restricting access to resources after authentication by applying policies. Once identity is verified, the system uses rules based on your role, group membership, or attributes to decide what you’re allowed to do and which resources you can access. These policies govern permissions such as read, write, or delete, ensuring that someone who proves who they are can only perform approved actions. Access control lists are one common way to implement these decisions, but the key idea is the authorization step that enforces permissions after authentication. Authentication proves identity, while whaling is unrelated to access control.

Authorization is the process of restricting access to resources after authentication by applying policies. Once identity is verified, the system uses rules based on your role, group membership, or attributes to decide what you’re allowed to do and which resources you can access. These policies govern permissions such as read, write, or delete, ensuring that someone who proves who they are can only perform approved actions. Access control lists are one common way to implement these decisions, but the key idea is the authorization step that enforces permissions after authentication. Authentication proves identity, while whaling is unrelated to access control.