At a university, a student signs in with a correct password, the payroll portal still refuses that account, and the identity system records the refusal. Which missing piece of this access sequence is authorization?
Select an answer to reveal the explanation.
Short Explanation
A lobby badge is not the key to the payroll office. You already proved the password, and the system already wrote the refusal, so the missing piece is the allow-or-block decision. The trap is treating the sign-in or the log line as that decision.
Full Explanation
Authorization is the decision about what an identified account may do, and it is separate from proving the password and from saving a history of the attempt. The payroll portal refused the student after the password was accepted and after the refusal was recorded, so the gap is the rights check. The rights decision that allows or blocks payroll after the password is already accepted is that gap. The proof step that checks the typed password before any payroll screen is opened for the student already succeeded, and that step only establishes identity. The written record of the refusal, stored by the identity system so the attempt can be reviewed later, preserves the event for review and does not grant or deny the portal. Full-disk encryption that protects payroll files stored on the server while the host is powered off protects stored files and does not decide whether this student may open the application. On the exam, a successful password check does not imply every application behind it is allowed. In operations, compare the payroll allow or deny for this student with the successful sign-in and the stored refusal before you treat the account as permitted.