Certified Cloud Security Professional (CCSP) Practice Exam

In the context of access control, what is the granting of the right to a user, program, or process to access data, resources, or services?

1. Authentication

2. Authorization

3. Non-Repudiation

4. Obfuscation

The correct answer is: Authorization

The correct answer is the granting of the right to a user, program, or process to access data, resources, or services is known as authorization. Authorization is a crucial aspect of access control, as it determines what an authenticated user is allowed to do within a system. After a user is authenticated, which verifies their identity, authorization ensures that they can only access the resources they have the permissions for. This includes defining what actions can be performed, such as viewing, editing, or sharing data. In contrast, authentication serves as the initial step to confirm a user’s identity, while non-repudiation ensures that a user cannot deny having performed a specific action within a system, providing proof of such actions. Obfuscation involves making data unclear or unintelligible, usually as a means of protection, rather than controlling access.