Question

Difficulty: EasyAAA Framework Concepts (Authentication, Authorization, Accounting)

A network administrator is implementing the AAA framework on an enterprise switch to manage access. Match each administrative operational task on the left to its corresponding AAA framework pillar on the right.

  • Validating user credentials against a centralized database before granting accessAuthentication
  • Restricting an authenticated engineer to specific privilege levels and CLI commandsAuthorization
  • Logging session start times, duration, and executed commands for compliance trackingAccounting

Answer

Validating user credentials matches Authentication; Restricting privilege levels and CLI commands matches Authorization; Logging session times and executed commands matches Accounting.
Authentication verifies identity ('who you are'), Authorization determines permissions and command rights ('what you can do'), and Accounting logs user activity and session details ('what you did').

Step-by-Step Solution

1
Analyze the task of validating user credentials.
Credential validation verifies identity (Who are you?), which is the function of Authentication.
Authentication is the first pillar of AAA responsible for verifying identity.
2
Analyze the task of restricting privilege levels and CLI commands.
Restricting access and capabilities enforces permission rules (What can you do?), which is the function of Authorization.
Authorization determines the scope of actions granted to an authenticated identity.
3
Analyze the task of logging session details and command history.
Logging activities creates an audit trail (What did you do?), which is the function of Accounting.
Accounting measures resource consumption and records session event logs.

Key Concept

Core Pillars of the AAA Framework (Authentication, Authorization, Accounting)
Estimated Time:45s
Rate this question