Examkin

Question

Difficulty: EasyAuthentication, Authorization, and Accounting (AAA)

An organization installs a new physical access control system at the entrance of its data center. When an employee presents a smart card and enters a personal identification number (PIN), the system checks these credentials against the central directory to verify who the employee is before unlocking the door. Which component of the Authentication, Authorization, and Accounting (AAA) framework is being directly performed during credential verification?

  1. AuthenticationAnswer
  2. B
    Authorization
  3. C
    Accounting
  4. D
    Non-repudiation

Answer

Authentication is the pillar of AAA responsible for verifying a user's or system's claimed identity using credentials like a smart card and PIN.
Verifying user credentials (such as a smart card and PIN) against a directory server confirms the user's identity, which is the exact function of authentication in the AAA security model.

Step-by-Step Solution

1
Identify the primary action taking place in the scenario.
The system receives a smart card and PIN to confirm that the person attempting entry is indeed who they claim to be.
Verifying claimed identity using authentication factors (something you have + something you know) is the core definition of identity verification.
2
Map the identity verification process to the correct AAA framework pillar.
Confirming identity corresponds directly to Authentication.
Authentication answers the question 'Who are you?', while Authorization answers 'What are you allowed to do?' and Accounting answers 'What did you do?'.

Key Concept

Authentication in the AAA Framework
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic