Which statement accurately differentiates authentication from authorization?

• A. Authentication proves identity; authorization grants access rights once identity is established.
• B. Authentication grants access rights; authorization proves identity.
• C. Authentication protects data; authorization controls network speed.
• D. Authentication and authorization are the same.

Answer: (A)

Proving who you are (authentication) and deciding what you can do (authorization) are two separate steps. Authentication verifies identity using credentials like a password, a fingerprint, or a token. Once identity is confirmed, authorization determines what resources you can access and what actions you’re allowed to perform, such as which files you can read or which systems you can administer. For example, you might log into a system to prove you’re you, but your permissions then decide whether you can open a sensitive file or change system settings. The other statements mix up these roles or treat them as the same, which isn’t accurate: authentication is about identity, while authorization is about permissions granted after that identity is established.