Question

Difficulty: EasyAuthentication, Authorization, and Accounting (AAA)

A network administrator configures a centralized syslog server to record user login timestamps, executed command histories, and session resource usage for auditing compliance. Which core component of the AAA framework is being implemented?

  1. A
    Authentication
  2. AccountingAnswer
  3. C
    Authorization
  4. D
    Non-repudiation

Answer

Accounting
Accounting is responsible for tracking user actions, monitoring session durations, and maintaining log entries of system resource consumption. This data provides accountability and essential records for security auditing.

Step-by-Step Solution

1
Identify the primary operational activity described in the scenario
The activity involves capturing timestamps, command histories, and system resource usage into log files.
Determining the functional goal (logging activity vs granting access vs checking credentials) isolates the correct AAA pillar.
2
Map the identified activity to the AAA framework pillars
Tracking usage data and generating audit logs directly corresponds to Accounting.
Accounting measures resource usage and collects audit information for billing, capacity planning, and security investigations.

Key Concept

Authentication, Authorization, and Accounting (AAA)
Rate this question