Multiple choice technology packaged enterprise solutions

Evaluate the following statement w.r.t Maximo Security: After authorization has verified that a user is who they say they are, authentication lets the user access various resources based on the identity of the user.

  1. True

  2. False

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

The statement reverses the standard security definitions. Authentication is the process of verifying who a user is (identity verification), while authorization determines what resources and operations that authenticated user is allowed to access. The statement claims authorization handles identity and authentication handles access, which is backwards.

AI explanation

The statement has authentication and authorization backwards. In security terminology (including Maximo's security model), authentication is the process that verifies a user is who they claim to be (e.g., via login credentials), and authorization is what happens afterward — determining what resources/actions that verified user is permitted to access, based on their identity and assigned roles/security groups. The statement claims the reverse order ('after authorization has verified... authentication lets the user access'), which inverts the actual relationship, making the statement false.