Multiple choice technology

What are the correct statements about Authentication and Authorization in a SharePoint2007 setup:(Multiple Selection)

  1. Authentication is done by IIS

  2. Authentication is done by IIS and SharePoint

  3. Authorization is done by SharePoint

  4. Authorization is done by IIS

Reveal answer Fill a bubble to check yourself
A,C Correct answer
Explanation

In SharePoint 2007, authentication is handled by IIS using Windows authentication (NTLM, Kerberos, Basic) before the request reaches SharePoint. SharePoint then performs authorization using its own security model including permissions, user/group memberships, and ACLs. SharePoint does not perform authentication, and IIS does not perform authorization.