Of the following choices, which best ensures user accountability for actions taken within a system or domain?
A.
Identification
B.
Authentication
C.
Authorization
D.
Credentials
Explanation:
Uniquely identifying and authenticating users is the only way to ensure
accountability. Identification alone does not prove the user is who they claim to
be. After showing proper credentials, a user is authorized access to resources.
Not really correct, the explanation said “Uniquely identifying and authenticating users is the only way to ensure
accountability.” Which means A n B? C is more appropriate, since A,B can only record down the login by not the action taken in the system or domain. However, C is to authorise the permission, right to user, then it reflect the action the user request!!