Examkin

Question

Difficulty: EasyAuthentication, Authorization, and Accounting (AAA)

Match each network access control scenario on the left with the corresponding pillar of the Authentication, Authorization, and Accounting (AAA) framework (or Identification) on the right.

  • A user enters their account username into a system prompt prior to submitting credentials.Identification
  • A server validates a user's password and one-time passcode (OTP) against a central database.Authentication
  • A security policy engine checks a user's role and grants read-only access to a specific database.Authorization
  • A gateway logs session start and end times, command history, and total byte counts for auditing.Accounting

Answer

Entering a username corresponds to Identification. Validating passwords and OTP codes corresponds to Authentication. Enforcing role-based access permissions corresponds to Authorization. Recording session duration and bandwidth consumption corresponds to Accounting.
Each phase of the access control workflow fulfills a distinct AAA pillar: Identification claims identity, Authentication verifies credentials, Authorization enforces permissions, and Accounting logs activity metrics.

Step-by-Step Solution

1
Analyze the first scenario (entering a username).
Entering a username is the assertion of identity before verification, matching Identification.
Identification establishes who the user claims to be.
2
Analyze the second scenario (validating passwords and OTP codes).
Verifying secret credentials proves the identity claim, matching Authentication.
Authentication verifies proof of identity.
3
Analyze the third scenario (checking roles to grant database permissions).
Restricting access based on policies matches Authorization.
Authorization defines what actions an authenticated user is permitted to perform.
4
Analyze the fourth scenario (logging session duration and byte counts).
Recording usage metrics and session logs matches Accounting.
Accounting tracks resource usage and creates audit logs for oversight.

Key Concept

Authentication, Authorization, and Accounting (AAA) Framework
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic