Examkin

Question

Difficulty: Very hardAuthentication, Authorization, and Accounting (AAA)

Match each enterprise AAA protocol mechanism or access control payload on the left with its corresponding functional role and operational process on the right.

  • RADIUS payload containing Acct-Status-Type = Stop and Acct-Input-Octets = 4194304Resource Usage & Session Metric Logging (Accounting)
  • TACACS+ packet authorization phase sending AUTHOR_REQUEST for command 'configure terminal'Per-Command Privilege Scoping & Execution Filtering (Authorization)
  • SAML 2.0 Response payload containing a digitally signed Assertion issued by an Identity Provider (IdP)Federated Identity Verification & Assertion Delivery (Authentication)
  • IEEE 802.1X EAP-TLS handshake exchanging X.509 client and server certificatesMutual Cryptographic Identity Verification (Authentication)

Answer

RADIUS payload with Acct-Status-Type pairs with Resource Usage & Session Metric Logging (Accounting). TACACS+ AUTHOR_REQUEST pairs with Per-Command Privilege Scoping & Execution Filtering (Authorization). SAML 2.0 Assertion pairs with Federated Identity Verification & Assertion Delivery (Authentication). IEEE 802.1X EAP-TLS handshake pairs with Mutual Cryptographic Identity Verification (Authentication).
The correct pairings evaluate the specific AAA functional domain of each enterprise protocol packet. RADIUS accounting attributes collect metric logs for session auditing. TACACS+ decouples authorization to inspect per-command execution rights. SAML assertions transmit federated identity authentication results across web domains. EAP-TLS enforces mutual authentication using digital certificate handshakes.

Step-by-Step Solution

1
Analyze the RADIUS Acct-Status-Type payload.
Identified as an Accounting mechanism tracking data transfer volume (octets) and session state.
RADIUS uses Accounting-Request messages (such as Start, Stop, and Interim-Update) to log metrics for auditing and billing.
2
Analyze the TACACS+ AUTHOR_REQUEST payload.
Identified as an Authorization mechanism evaluating individual CLI commands.
TACACS+ decouples AAA, allowing granular authorization queries for specific administrative commands prior to execution.
3
Analyze the SAML 2.0 Response payload.
Identified as a Federated Authentication mechanism using IdP assertions.
SAML assertions communicate user authentication state across domain boundaries from an IdP to a SP.
4
Analyze the IEEE 802.1X EAP-TLS handshake.
Identified as a Mutual Authentication protocol based on dual X.509 certificate validation.
EAP-TLS requires both client and server certificates, satisfying mutual authentication demands at Network Access Control endpoints.

Key Concept

Authentication, Authorization, and Accounting (AAA) Protocol Functional Separation
Estimated Time:3m 0s
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic