Question

Difficulty: EasyAuthentication, Authorization, and Accounting (AAA)

An enterprise web portal requires remote employees to enter a username and a dynamic one-time password (OTP) generated by an authenticator application to prove who they are before entering the network. Which pillar of the AAA framework is directly performed during this credential verification step?

  1. AuthenticationAnswer
  2. B
    Authorization
  3. C
    Accounting
  4. D
    Non-repudiation

Answer

Authentication is the AAA pillar responsible for validating a user's claimed identity via credentials such as a username and dynamic OTP.
Authentication is the process of verifying a user's claimed identity using one or more factors, such as passwords, OTPs, or biometrics.

Step-by-Step Solution

1
Identify the primary security action described in the scenario
The user presents a username and dynamic OTP code to prove their identity to the system.
Submitting credentials to validate who a user claims to be is the core objective of identity verification.
2
Map the action to the corresponding pillar of the AAA model
Proving identity with credentials maps directly to Authentication.
Authentication focuses on identity verification, distinct from granting privileges (Authorization) or logging session details (Accounting).

Key Concept

Authentication in the AAA framework establishes and validates the identity of a user or process using credentials before access is granted.
Rate this question