What is the difference between a Windows Authentication and a SQL Server Authentication? How does SQL Server perform authentication when a user connects

What is the difference between a Windows Authentication and a SQL Server Authentication?
How does SQL Server perform authentication when a user connects from a nontrusted connection with a specified logon name and password?
Why is it not advisable to enable the SA account in SQL Server?