A security administrator is reviewing identity management definitions for new security operations team members. Match each access control phase of the AAA framework on the left with its corresponding operational security scenario on the right.
- IdentificationAn employee enters a unique corporate username at a portal login prompt to claim an identity.
- AuthenticationA server validates a user's password and time-based one-time password (TOTP) code to prove claimed identity.
- AuthorizationA firewall evaluates dynamic security policies to permit an authenticated user access to specific network subnets.
- AccountingA SIEM platform collects RADIUS log entries detailing user session start/stop times and bandwidth consumption.
Answer
Identification matches entering a unique username to claim identity; Authentication matches validating a password and TOTP code to prove identity; Authorization matches evaluating security policies to grant network subnet access; Accounting matches collecting log entries detailing session times and bandwidth usage.
Each phase of the access control model serves a distinct security role: Identification claims identity via an identifier (username); Authentication verifies that claim using credentials (password + TOTP); Authorization enforces access permissions (firewall rules); and Accounting logs resource usage and activity (SIEM/RADIUS session logs).
Step-by-Step Solution
Key Concept
Authentication, Authorization, and Accounting (AAA) Framework