Which statement best describes a term 'authorization'?

• A. Grants access rights
• B. Confirms identity
• C. Encrypts data
• D. Stores credentials

Answer: (A)

Authorization is about determining what a verified user is allowed to do or access. After someone proves who they are (authentication), the system checks their permissions and roles to grant or deny specific actions and resources. It’s the decision that gives or restricts access based on policy, ensuring least privilege and proper access control.

For example, an employee who has authenticated to the system may be authorized to view payroll data but not to modify HR records. That permission set defines what they can do, regardless of their ability to prove who they are.

The other options don’t fit because authentication is about confirming identity, encryption protects data, and storing credentials is about credential management rather than access decisions.