In a client-server environment, which component typically enforces access control and resource authorization across the network?

In a client-server environment, which component typically enforces access control and resource authorization across the network?

• A. Client software on end-user devices
• B. Resource hardware
• C. Directory service such as Active Directory
• D. Local user accounts only

Answer: (C)

Centralized authentication and authorization is handled by a directory service. This type of component stores user identities, groups, and permissions and uses policy rules to control who can access which resources across the network. It provides a consistent way to verify who a user is (authentication) and what resources or actions they’re allowed to access (authorization) for any network resource. By managing credentials and access policies in one place, the network enforces the same rules for all clients and servers, simplifying administration and enhancing security. Clients may request access, but enforcement is driven by the directory service rather than the individual endpoints. Resource hardware can protect its own resources, but it doesn’t coordinate across the entire network. Local user accounts exist only on specific machines and don’t scale to network-wide access control.

Centralized authentication and authorization is handled by a directory service. This type of component stores user identities, groups, and permissions and uses policy rules to control who can access which resources across the network. It provides a consistent way to verify who a user is (authentication) and what resources or actions they’re allowed to access (authorization) for any network resource. By managing credentials and access policies in one place, the network enforces the same rules for all clients and servers, simplifying administration and enhancing security.

Clients may request access, but enforcement is driven by the directory service rather than the individual endpoints. Resource hardware can protect its own resources, but it doesn’t coordinate across the entire network. Local user accounts exist only on specific machines and don’t scale to network-wide access control.