Question

Difficulty: EasyAAA Framework and Authentication Methods

Match each AAA framework component or access control concept on the left to its corresponding operational description on the right.

  • AuthenticationVerifying the claimed identity of a user, service, or device attempting network access.
  • AuthorizationGranting or restricting specific privileges, commands, and permissions to an authenticated entity.
  • AccountingTracking session connection duration, commands executed, and network resource usage for auditing.
  • Multifactor Authentication (MFA)Requiring credentials from two or more distinct authentication factor categories before granting access.

Answer

Authentication matches with verifying identity; Authorization matches with granting specific permissions; Accounting matches with tracking activity and resource usage for auditing; Multifactor Authentication (MFA) matches with requiring two or more distinct credential categories.
Authentication strictly addresses identity verification. Authorization governs access rights and command permissions following successful authentication. Accounting logs historical session data and usage statistics for auditing purposes. Multifactor Authentication requires credentials from multiple distinct factor categories to validate identity.

Step-by-Step Solution

1
Determine the primary function of Authentication in the AAA framework.
Authentication validates who the user is, matching the description of verifying a claimed identity.
Before granting access or assigning permissions, the system must verify identity claims.
2
Determine the core purpose of Authorization.
Authorization manages privilege levels, matching the description of granting or restricting specific access permissions.
Authorization enforces access control policies after an identity has been authenticated.
3
Determine the operational role of Accounting.
Accounting tracks usage metrics, matching the description of logging session details and resource consumption for auditing.
Accounting creates an audit trail of user actions, session lengths, and data usage.
4
Identify the definition of Multifactor Authentication (MFA).
MFA combines separate credential categories, matching the description of requiring two or more distinct factor types.
MFA enhances security by demanding proof across independent factor classes, such as knowledge, possession, or inherence.

Key Concept

AAA Framework Core Pillars and MFA Fundamentals
Rate this question