Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

During a network infrastructure assessment, a security analyst reviews the operational workflow of a centralized 802.1X RADIUS deployment. When an employee connects a corporate laptop to an enterprise switch port, the RADIUS server first verifies the user's domain password against Active Directory. Immediately following identity verification, the RADIUS server returns specific network access attributes that instruct the switch to dynamically place the user's connection onto VLAN 30 (Finance). Which pillar of the AAA framework is directly performed by dynamically placing the user into VLAN 30?

  1. A
    Authentication
  2. AuthorizationAnswer
  3. C
    Accounting
  4. D
    Perimeter Trust

Answer

Authorization
Authorization is the process of granting specific permissions, privileges, and network access limits to an authenticated entity. In this scenario, placing the connection into VLAN 30 enforces role-based access privileges, making it a direct application of authorization.

Step-by-Step Solution

1
Identify the distinct phases of the AAA framework described in the scenario
The initial step (verifying domain credentials against Active Directory) establishes identity, which is Authentication. The subsequent step (assigning VLAN 30 attributes) defines what resources the validated user is permitted to access.
AAA separates identity verification from permission assignment and tracking.
2
Map the dynamic VLAN 30 assignment to the corresponding AAA pillar
Restricting network access rights based on user role attributes corresponds to Authorization.
Authorization defines access privileges, network segmentation restrictions, and resource boundaries.

Key Concept

Authentication, Authorization, and Accounting (AAA) Framework
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic