Courseiva
Access Controls Concepts →easyMultiple Choice

ISC2 CC Access Controls Concepts Practice Question

What is the process of claiming an identity called?

⚠ Common exam trap

The trap here is conflating identification with authentication — candidates often pick 'Authentication' because both involve presenting credentials, but identification is merely the claim, while authentication is the verification of that claim.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Identification

Identification is the process of claiming an identity — a subject asserts who they are (e.g., by presenting a username, smart card, or biometric sample) before any verification occurs. Authentication then validates that claim, and authorization determines what the verified identity may do. In the ISC2 access control model, identification is the first step in the AAA/identity lifecycle.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Authentication

    Why it's wrong here

    Authentication verifies a claimed identity by validating credentials, but the question asks for the act of claiming that identity, which is identification. It is tempting because authentication is the adjacent, commonly tested term, and it would be correct if the question asked how credentials are validated.

  • ✗

    Authorization

    Why it's wrong here

    Authorization decides what an authenticated subject may access; it does not establish or claim identity. It is tempting because it always follows authentication in access flows, but it would be the correct answer when the question asks what governs permissions or access to a resource.

  • ✗

    Accountability

    Why it's wrong here

    Accountability is the obligation to answer for actions, typically enforced through logging and auditing, and it does not claim an identity. It is tempting because it appears alongside authentication and authorization in AAA models, but it would be correct when the question concerns tracing actions to a responsible party.

  • ✓

    Identification

    Why this is correct

    Identification is the act of a subject presenting a claimed identity, such as a username, before any proof is offered. Authentication then verifies that claim, and authorisation grants access. The question asks specifically about claiming, so identification is the process named.

Quick reference

AAA Protocol Comparison

ProtocolPort(s)EncryptionTransportPrimary Use
RADIUS1812 / 1813Password onlyUDPNetwork access control
TACACS+49Full packetTCPDevice administration
Diameter3868Full sessionTCP / SCTPCarrier / mobile networks
802.1X—EAP-basedLayer 2Port-based access control

TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.

About these practice questions

One of 989 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official ISC2 exam blueprint

This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.