Question

Difficulty: EasyAAA Framework Concepts (Authentication, Authorization, Accounting)

A network administrator needs to record and audit the specific CLI commands executed by engineers during their active management sessions on enterprise routers. Which component of the AAA framework provides this record-keeping functionality?

  1. AccountingAnswer
  2. B
    Authentication
  3. C
    Authorization
  4. D
    Identification

Answer

Accounting is the AAA component responsible for tracking user activity and maintaining audit logs of executed commands.
Accounting is designed to track user activity and resource consumption. In device administration, command accounting specifically records each command entered by an administrator into an audit log on the TACACS+ server.

Step-by-Step Solution

1
Analyze the functional requirement described in the scenario.
The requirement specifies logging and auditing actions taken by users after gaining system access.
The AAA framework divides security management into three distinct operational pillars: Authentication, Authorization, and Accounting.
2
Map the requirement to the corresponding AAA service.
Accounting tracks network resource utilization and logs user administrative commands and session metrics.
Authentication asks 'Who are you?', Authorization asks 'What are you allowed to do?', and Accounting asks 'What did you actually do?'.

Key Concept

AAA Framework Core Functions
Rate this question