What two purposes does the user record serve?

• A. Allows access to the system and lets the system know who you are
• B. Lets the system know who you are and how you can use the system
• C. Allows you access to the system and establishes how you can use the system
• D. Establishes how you can use the system and ensures your actions are noted by the system audit mechanism

Answer: (B)

Think of the user record as handling two core duties: identifying who you are and deciding what you’re allowed to do. First, it lets the system know who you are, so it can verify your identity. Second, it defines what actions you can perform by linking your identity to permissions, roles, or access controls. This means after you sign in, the system not only recognizes you but also enforces what resources you can access and what operations you can perform based on your privileges. While auditing and monitoring can also relate to user activity, the essential purposes of the user record are to establish identity and to govern how you can use the system.