問題文
An administrator states that authentication and authorization are different steps. A colleague asks for a concrete way to see the difference. Which description separates them?
選択肢
- Authentication establishes who the requester is, and authorization decides whether that identity may perform the requested action.
- Authentication checks the password and authorization checks the second factor, so both are steps in proving identity and the difference is only which kind of evidence each step examines before letting the request proceed.
- Authorization happens first, because the system must know what is allowed before it can ask for credentials at all.
- The two terms mean the same thing in practice, so a system that checks one has checked the other.