An organization is updating its enterprise access control policy to comply with strict security standards. Match each operational security task to the corresponding AAA (Authentication, Authorization, and Accounting) or Identification function it represents.
- A network access server validates a user's digital certificate and smart card PIN against the central identity provider during domain logon.Authentication
- A database gateway checks an enterprise role matrix to permit read-only query execution on financial records.Authorization
- A centralized syslog server records administrative session timestamps, executed PowerShell commands, and egress data volume.Accounting
- A web portal prompts an incoming visitor to enter their unique username before initiating any credentials verification.Identification
Answer
Task 1 maps to Authentication; Task 2 maps to Authorization; Task 3 maps to Accounting; Task 4 maps to Identification.
Each task directly corresponds to a fundamental identity and AAA principle: entering a username claims an identity (Identification); checking certificates and PINs verifies that claim (Authentication); evaluating role-based query permissions determines access rights (Authorization); and recording command execution and timestamps provides accountability and auditability (Accounting).
Step-by-Step Solution
Key Concept
Core Pillars of Identification, Authentication, Authorization, and Accounting (AAA)