Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

A network security consultant is auditing a newly implemented TACACS+ access control solution for datacenter routers. Match each administrative operational activity to its corresponding pillar within the AAA framework.

  • An engineer presents a corporate username and time-based hardware token passcode to prove their identity to the network terminal.Authentication
  • The central server evaluates the engineer's security group membership and restricts execution to a specific subset of privilege-level commands.Authorization
  • The device generates timestamped records of commands executed during the shell session and transmits them to a centralized audit server.Accounting

Answer

Presenting credentials to establish identity matches Authentication; evaluating security groups to grant specific command execution privileges matches Authorization; generating timestamped logs of executed commands for auditing matches Accounting.
Authentication is the process of verifying a user's claimed identity using credentials such as passwords or hardware tokens. Authorization determines the specific rights, privileges, and commands permitted for that verified identity. Accounting collects telemetry, session timestamps, and command history to maintain accountability and support forensic auditing.

Step-by-Step Solution

1
Analyze the first activity involving identity proof via username and hardware token passcode.
Identify that credential validation and identity verification fall under Authentication.
Authentication is responsible for confirming the identity of a subject before granting system access.
2
Analyze the second activity involving security group evaluation and command execution restriction.
Identify that granting specific rights based on policy falls under Authorization.
Authorization determines what actions, commands, or resources an authenticated identity is permitted to access.
3
Analyze the third activity involving session logging, timestamp generation, and telemetry transmission.
Identify that tracking user actions for compliance and monitoring falls under Accounting.
Accounting measures resource consumption and maintains detailed logs of subject activity for non-repudiation and auditing.

Key Concept

Authentication, Authorization, and Accounting (AAA)
Estimated Time:1m 30s
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic