Which statement would be a misconception about Authorization?

Correct Answer: A

proves the user typed a username

The misconception is "proves the user typed a username"; in reality, Authorization determines what an authenticated identity is allowed to do.