ISC2 CC Access Controls Concepts Practice Question
An employee uses their username to claim an identity and then enters a password to prove it. What is the term for the process of proving the claimed identity?
⚠ Common exam trap
The trap is conflating identification with authentication — candidates see 'username' in the question and pick identification, but the question explicitly asks about the step that proves the claimed identity, which is authentication.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Authentication
Authentication is the process of verifying a claimed identity, typically by validating one or more factors such as something you know (password), something you have (token), or something you are (biometric). When the employee enters a password to prove the username they claimed, that verification step is authentication. Identification is the act of claiming the identity; authentication proves it.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Authorization
Why it's wrong here
Authorization governs what an authenticated subject may access, so it answers a different question than proving identity. It is tempting because it follows authentication in every login flow, yet the stem describes the credential check itself, which authentication performs.
- ✗
Accounting
Why it's wrong here
Accounting records activity for auditing and billing after access occurs; it never verifies a claimed identity. It is tempting because it is the third element of the AAA triad alongside authentication, but the stem asks only about proving the username with a password.
- ✓
Authentication
Why this is correct
Authentication is the process of verifying a claimed identity, satisfying the stem's requirement to prove the username. The password is validated against stored credentials, confirming the user is who they claim to be before any authorisation decision occurs.
- ✗
Identification
Why it's wrong here
Identification is the act of claiming an identity, such as supplying a username; it does not verify anything, so the password check remains unaccounted for. It is tempting because the stem's first clause describes identification, and it would be correct if asked what the username entry itself represents.
Go deeper
Related to this question
Learn chapter
Authentication and Authorization Methods
Key term
Authentication
Authentication is the process of verifying that someone or something is who or what it claims to be before granting access to a system or resource.
Key term
Facial Recognition Technology
Facial recognition technology is a biometric security method that identifies or verifies a person by analyzing and comparing patterns of their facial features.
About these practice questions
Courseiva writes every CC question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.