Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

An enterprise network administrator is configuring centralized access management for core network hardware using a TACACS+ server. To align with the Authentication, Authorization, and Accounting (AAA) framework, which of the following configurations specifically satisfy the Authorization and Accounting pillars? (Select TWO.)

  1. Restricting specific CLI commands an authenticated administrator can execute based on their assigned roleAnswer
  2. Recording timestamped entries of executed administrative commands to a centralized audit serverAnswer
  3. C
    Verifying user credentials against a multi-factor TOTP challenge during initial session setup
  4. D
    Applying network firewall rules to block inbound SSH connections from unauthorized subnets

Answer

The correct configurations are restricting specific CLI commands an authenticated administrator can execute based on their assigned role, and recording timestamped entries of executed administrative commands to a centralized audit server.
Authorization defines the specific permissions and executable commands allowed for an authenticated role. Accounting captures timestamped records of user activity to maintain an accurate audit log.

Step-by-Step Solution

1
Identify the core requirements of Authorization and Accounting within AAA.
Authorization specifies permitted privileges and actions, while Accounting records and audits user actions during a session.
Distinguishing between identity verification, permission granting, and logging is essential for accurate classification.
2
Evaluate command restriction controls.
Restricting executable CLI commands by role explicitly determines allowed actions, directly fulfilling Authorization.
Authorization answers what actions an authenticated user is allowed to perform.
3
Evaluate logging controls.
Logging timestamped command executions creates an audit trail of user activity, directly fulfilling Accounting.
Accounting tracks user actions for accountability and auditing purposes.

Key Concept

Authentication, Authorization, and Accounting (AAA)
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic