Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

A security technician is troubleshooting a user access issue on a corporate document platform. The user successfully validates their password and multi-factor authentication prompt at login. However, when attempting to open shared department folders, the platform denies access with a 'Privilege Insufficient' error. System logs confirm that the identity provider successfully verified who the user is, but failed to evaluate or grant access permissions to the requested resources. Which component of the AAA framework is failing to execute as intended?

  1. AuthorizationAnswer
  2. B
    Authentication
  3. C
    Accounting
  4. D
    Non-repudiation

Answer

Authorization is the failing component because identity verification succeeded, but resource access rights were not granted.
Authorization is responsible for determining whether an authenticated subject has permission to access a specific object or resource. In this scenario, the user successfully proved their identity (authentication), but the system failed to grant or verify their access permissions for the shared folders.

Step-by-Step Solution

1
Analyze the problem statement for authentication activity.
The user successfully validated credentials and MFA, confirming that the Authentication step succeeded.
Authentication verifies identity.
2
Analyze the access failure.
The system blocked access due to missing permissions ('Privilege Insufficient').
Determining what actions an authenticated user can perform on specific resources is the function of Authorization.
3
Identify the failing AAA pillar.
Authorization failed because permission evaluation/granting did not take place properly.
Authorization explicitly governs rights and permission assignment in AAA.

Key Concept

Authentication vs. Authorization vs. Accounting (AAA)
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic