Insufficient authorisation occurs when access to an IT resource that is normally protected is granted to an attacker. It usually happens because the IT resources were implemented under the assumption that they would only be accessed by trusted consumer programs. For example, a database can be designed with open, readable passwords $-$instead of unreadable ones obtained by applying hashing and other security mechanisms$-$ under the assumption that they only would be seen by authorised cloud consumers.

Group of answer choices

True

False