Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

An enterprise configures a remote-access VPN portal integrated with a centralized AAA infrastructure. When an engineer connects, the following sequential process occurs:

1. The gateway verifies the engineer's username, password, and multi-factor authentication token against the directory service.
2. The gateway evaluates the engineer's group memberships and applies a dynamic Network Access Control List (NACL) to restrict access strictly to database subnet resources.
3. The gateway logs the engineer's active session duration, assigned IP address, and bandwidth consumption to an auditing server.

Which core pillar of the AAA security framework is directly performed during step 2?

  1. A
    Authentication
  2. AuthorizationAnswer
  3. C
    Accounting
  4. D
    Non-repudiation

Answer

Authorization is the AAA pillar demonstrated when enforcing resource access restrictions and applying dynamic control lists based on user privileges.
Evaluating group memberships and applying network access control lists (NACLs) to limit accessible network subnets directly enforces permissions, which is the exact definition and responsibility of the Authorization pillar in AAA.

Step-by-Step Solution

1
Analyze step 1 of the scenario
Step 1 confirms and validates identity credentials (Authentication).
Authentication is the process of verifying who a user claims to be.
2
Analyze step 2 of the scenario
Step 2 evaluates permissions and applies ACL restrictions based on user group membership (Authorization).
Authorization dictates what actions or resources an authenticated user is permitted to access.
3
Analyze step 3 of the scenario
Step 3 tracks session usage and duration metrics (Accounting).
Accounting records user activities, consumption, and event timestamps for auditing.

Key Concept

Authentication, Authorization, and Accounting (AAA) Security Framework
Estimated Time:1m 15s
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic