Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

An organization deploys a centralized Privileged Access Management (PAM) solution to govern administrator access to production databases. When a database administrator requests a session, the PAM system first verifies their identity using a hardware token and PIN. Next, the PAM system evaluates an access policy matrix to determine if the session occurs within an approved maintenance window and applies a restricted read-only role for that specific database instance. Finally, the proxy engine writes a cryptographic audit log of all executed SQL queries. Which pillar of the Security AAA framework is being implemented when the PAM system evaluates the policy matrix to grant the restricted read-only role?

  1. AuthorizationAnswer
  2. B
    Authentication
  3. C
    Accounting
  4. D
    Non-repudiation

Answer

Authorization is the AAA pillar responsible for evaluating access policies and applying permission restrictions based on user roles and environmental context.
Evaluating an access policy matrix to assign specific roles, rights, or conditions (such as limiting permissions to a read-only role during specific maintenance windows) is the core function of Authorization within the AAA security framework.

Step-by-Step Solution

1
Analyze the action described in the target phase of the scenario.
The target phase evaluates an access policy matrix, checks environmental conditions (approved maintenance window), and assigns specific rights (restricted read-only role).
Identifying the functional behavior helps categorize it into one of the AAA components.
2
Differentiate between AAA pillars.
Authentication verifies identity (token/PIN). Authorization grants specific access permissions and roles based on context. Accounting logs and tracks activity (recording SQL queries).
Matching the scenario activity to definitions confirms the correct classification.
3
Select the matching AAA pillar.
Evaluating policy to grant specific permissions and restrict roles is explicitly the function of Authorization.
Authorization enforces access control parameters following successful authentication.

Key Concept

Authentication, Authorization, and Accounting (AAA) framework responsibilities
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic