Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

A network security engineer is auditing the AAA implementation for an enterprise 802.1X wireless network backed by a central RADIUS server. Which of the following statements correctly describe how authentication, authorization, or accounting functions operate in this deployment? (Select TWO.)

  1. The RADIUS server performs authentication by validating user-provided credentials against a centralized directory service.Answer
  2. Accounting functions capture session start/stop timestamps and data transfer volumes to provide historical audit logs.Answer
  3. C
    The client wireless supplicant determines authorization by locally assigning its own network permissions prior to connection.
  4. D
    Passing the initial credential authentication stage automatically authorizes unrestricted access to all internal enterprise subnets.

Answer

The RADIUS server performs authentication by validating user-provided credentials against a centralized directory service, and accounting functions capture session start/stop timestamps and data transfer volumes to provide historical audit logs.
Authentication is correctly described by the statement where RADIUS validates credentials against a central directory to verify identity. Accounting is correctly described by the statement where session duration and network consumption metrics are logged for compliance and auditing purposes.

Step-by-Step Solution

1
Differentiate between the three distinct pillars of AAA in network security.
Authentication proves identity, Authorization determines allowed rights and access controls, and Accounting logs user activity.
Establishing accurate function definitions allows proper evaluation of the scenario statements.
2
Evaluate identity verification mechanisms.
The statement describing the RADIUS server checking user credentials against a directory service represents identity verification (Authentication).
Credential validation against an authoritative directory service is the fundamental mechanism of authentication.
3
Evaluate session tracking mechanisms.
The statement describing logging session timestamps and data bandwidth usage represents resource tracking (Accounting).
Capturing session metrics and activity logs provides auditability and non-repudiation.

Key Concept

Authentication, Authorization, and Accounting (AAA)
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic