ITPEC IP October 2023 Question 65
ITPEC IP October 2023 — Question 65 of 100
Matching a submitted user ID and password against registered credentials before showing the business menu implements system access control. Authentication verifies the claimed identity, and the system prevents an unauthenticated user from entering the protected function. This is a preventive internal control.
Answer (b)
Why not others:
- (a) the process does not detect a system failure
- (c) access rights were already configured; the login process checks access rather than granting new rights
- (d) password-setting validity concerns rules such as length, complexity, and reuse, not matching a login credential
Key rule: Authentication checks who the user is; authorization or access control determines whether protected resources may be reached.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.