6.8.1 Review Questions R1. Explain the difference between R2. Describe the gener
ID: 2247569 • Letter: 6
Question
6.8.1 Review Questions R1. Explain the difference between R2. Describe the general steps taken R3. Identify and describe the three basic R4. Explain the role of hard to forge Describe the type of authentication environment examined in this chapter. R5. authentication and authorization. during the authentication process. authentication factors. information in authentication. Ro. Esplain the diffrences berwen to Is of threats described in this chapter. Describe the five basic attacks on authentication systems. Describe how password hashing works. R7. Give examples of such informa- R8. tionExplanation / Answer
R1)Answer:
Difference between Authentication and Authorization:
Authentication:
Authentication is the process of verifying the identity of a user by obtaining some sort of credentials and using those credentials to verify the user's identity. If the credentials are valid, the authorization process starts. Authentication process always proceeds to Authorization process.
->It is the process of verifying the identity of a user
->It always proceeds to authorization.
->It has two separate levels because all the requests coming through the IIS before it is handled
->They have additional schemes like windows authentication, forms authentication and passport authentication
Authorization:
Authorization is the process of allowing an authenticated users to access the resources by checking whether the user has access rights to the system. Authorization helps you to control access rights by granting or denying specific permissions to an authenticated user.
->It is the process of checking whether the user has the access rights to the system.
->It is the process of allowing an authenticated user access to resources.
-.>It allows two ways to authorize the access to a given resources.
->The two ways are URL authorization and File authorization.
R3)Factors:
Authentication factors:
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.