Which statement correctly distinguishes authentication from authorization?

• A. Authorization verifies identity; authentication determines access rights.
• B. Authentication verifies identity; authorization determines access rights.
• C. Authentication and authorization are the same.
• D. Authentication encrypts data.

Answer: (B)

Authentication confirms who you are, using credentials like a password, fingerprint, or token to verify your identity. Authorization comes after that, deciding what you’re allowed to do by checking your permissions or role. So the statement that authentication verifies identity while authorization determines access rights captures the real distinction: first you prove who you are, then the system decides what you can access or perform. The other ideas mix up the roles, for example, thinking the process that checks identity also grants access rights, or claiming authentication is the same as authorization, or that authentication is about encrypting data.