What is the difference between authentication and authorization?

• A. Authentication verifies identity; Authorization determines access rights.
• B. Authorization verifies identity; Authentication determines access rights.
• C. They are the same concept.
• D. Authentication is about encryption; Authorization is about decryption.

Answer: (A)

Authentication verifies identity; Authorization determines access rights.

Think of it as two steps in access control. First, you prove who you are—enter a password, provide a fingerprint, or use a token. That proof is authentication. Once you’re confirmed, the system checks what you’re allowed to do or see based on your permissions or role. That check is authorization. You might be logged in (authenticated) but still blocked from certain actions if your permissions don’t include them.

The other statements mix up these roles or bring in encryption, which isn’t the point here. Encryption protects data, not the process of proving who you are or deciding what you may do.