Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

A network engineer notices that users connecting to the enterprise Wi-Fi are successfully validating their domain credentials against a centralized RADIUS server. However, after successful login, all users—including system administrators—are placed into a restricted guest VLAN instead of being assigned their appropriate department VLANs. Which aspect of the AAA framework is failing to execute correctly in this scenario?

  1. Assigning dynamic network access rights and group privileges upon successful identificationAnswer
  2. B
    Validating user credentials against the centralized directory service
  3. C
    Recording log entries of user session durations and resource consumption
  4. D
    Establishing implicit trust for all authenticated internal network traffic

Answer

Assigning dynamic network access rights and group privileges upon successful identification
The scenario describes a successful authentication phase where the RADIUS server validates credentials. However, the system fails during the authorization phase because it does not apply role-based access rules or assign the correct network attributes (such as VLAN IDs) based on user permissions.

Step-by-Step Solution

1
Analyze the AAA phase results in the scenario.
Domain credential validation against RADIUS succeeded, confirming authentication is working.
Authentication verifies identity, which occurred without error.
2
Identify the point of failure after login.
Users are incorrectly assigned to a restricted guest VLAN regardless of their group roles.
Determining what resources or network segments a user can access post-login is authorization.
3
Match the failed function to the correct AAA component.
The failure to grant appropriate VLAN permissions is an authorization failure.
Authorization enforces access rights based on identity and policy.

Key Concept

Distinction between Authentication (verifying identity) and Authorization (granting permissions/access)
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic