Define 'authentication,' and 'authorization,' and the tools that are used to support them in enterprise deployments.
"These terms are similar but different. Authentication confirms your identity to gain access to the system while authorization determines whether you are in fact authorized to have access to the resources. Authentication usually requires a username and password. Authorization and be done in a variety of ways which confirm the identity of the user who has provided their credentials through the authentication process. While these two processes differ, the tools used to execute them are the same and include APIs and LDAP servers."
Yet another technical question asking you to define some terms and demonstrate that you know how to work with the technology they involve. As with most technical questions, the best strategy is a straightforward answer defining the terms followed by a brief description of the tools used to manage them. The interviewer will ask you a follow-up question if they'd like some additional information.
"While both of these terms involve security and gaining access to a network, they are different in terms of their perspective. Authentication means to confirm your own identity, while authorization means granting access to the network for other users. Tools used for both authentication and authorization include APIs and LDAP servers."
