Which statement best describes the relationship between authentication and auditing?

• A. Auditing records activity logs but does not verify identity.
• B. Authentication verifies identity; Auditing records activities.
• C. Authentication relies on auditing.
• D. Auditing verifies identity only.

Answer: (B)

Authentication is the process of proving who you are, using credentials like a password, token, or biometric. Auditing, on the other hand, is about recording what happens in the system—who did what, when, and from where. The best description is that authentication verifies identity, while auditing records activities. This separation makes sense: you must prove who you are to access resources, and the system keeps logs to provide accountability and evidence of actions, including authentication attempts. The other statements blur these roles or imply that auditing or authentication are primarily about the other’s function, which isn’t accurate.