Examkin

Question

Difficulty: MediumAuthentication, Authorization, and Accounting (AAA)

An enterprise security engineer configures a centralized TACACS+ server to manage administrative access to core switches. A network technician successfully enters their credentials and time-based one-time password (TOTP) to establish an interactive console session. However, when attempting to execute interface configuration commands, the router rejects the command with a privilege denial message. Which pillar of the AAA framework is responsible for determining whether the technician can execute these specific commands?

  1. AuthorizationAnswer
  2. B
    Authentication
  3. C
    Accounting
  4. D
    Non-repudiation

Answer

Authorization is the AAA pillar responsible for validating and granting specific privilege levels and command permissions to an identified user.
Authorization is the AAA component that determines the specific actions, resources, and commands an authenticated user is permitted to access. In this scenario, while authentication succeeded at login, authorization policies restricted the user from executing privileged configuration commands.

Step-by-Step Solution

1
Analyze the initial logon phase in the scenario.
The technician successfully provided a username, password, and TOTP to establish identity.
This confirms that the Authentication pillar successfully verified who the technician is.
2
Evaluate the cause of the command execution failure.
The system denied access when specific configuration commands were entered.
Permissions and command-level access privileges are governed by policy enforcement within Authorization.
3
Identify the corresponding AAA pillar.
Authorization governs command-level restrictions in protocols such as TACACS+.
Per-command privilege checking is the explicit function of Authorization.

Key Concept

Authentication, Authorization, and Accounting (AAA) Functional Roles
Estimated Time:1m 0s
Rate this question

Topics

Authentication, Authorization, and Accounting (AAA)

More questions from this topic