Confirms identity via passwords or biometrics?

Confirms identity via passwords or biometrics?

• A. Layered Security in IAM
• B. Access Control Layer
• C. Defense-in-Depth
• D. User Authentication Layer

Answer: (D)

Authentication is the process of proving who a user is. When someone enters a password or provides biometric data, the system verifies those credentials to confirm identity, which is the job of the User Authentication Layer in IAM/CIAM architectures. This layer is specifically about confirming identity, not about granting access to resources or enforcing permissions. The other concepts describe broader security strategies or functions: Defense-in-Depth and Layered Security in IAM refer to multiple controls and layers working together to protect systems, not the act of verifying who someone is. The Access Control Layer is about deciding what resources a verified user may access (authorization) after identity has been established. So the option describing identity verification—the User Authentication Layer—is the best match.

Authentication is the process of proving who a user is. When someone enters a password or provides biometric data, the system verifies those credentials to confirm identity, which is the job of the User Authentication Layer in IAM/CIAM architectures. This layer is specifically about confirming identity, not about granting access to resources or enforcing permissions.

The other concepts describe broader security strategies or functions: Defense-in-Depth and Layered Security in IAM refer to multiple controls and layers working together to protect systems, not the act of verifying who someone is. The Access Control Layer is about deciding what resources a verified user may access (authorization) after identity has been established. So the option describing identity verification—the User Authentication Layer—is the best match.