Examkin

Soru

Zorluk: ZorAAA Framework Concepts (Authentication, Authorization, Accounting)

A network security administrator is aligning enterprise network management requirements with AAA framework services and protocol architecture. Match each operational task or network access requirement on the left with its corresponding AAA component or protocol mechanism on the right.

  • Validating user credentials against a centralized directory server during an initial 802.1X supplicant connectionAuthentication
  • Restricting an authenticated operator from executing specific privilege level configuration commands on a routerAuthorization
  • Logging start and stop timestamps, user identity, and session byte counts for administrative sessions to a central databaseAccounting
  • Encrypting the complete body of transmission packets over connection-oriented TCP port 49 during administrative sessionsTACACS+ Protocol Mechanics

Cevap

Validating credentials maps to Authentication; restricting command execution maps to Authorization; logging timestamps and session data maps to Accounting; encrypting full packet bodies over TCP port 49 maps to TACACS+ Protocol Mechanics.
Each operational requirement directly corresponds to a fundamental pillar of the AAA framework or a specific protocol implementation detail: Authentication handles identity verification, Authorization enforces command and resource access rights, Accounting logs session and audit data, and TACACS+ provides full-payload encryption over TCP port 49.

Adım Adım Çözüm

1
Identify the AAA pillar responsible for identity verification.
Validating user credentials against a central directory service establishes identity, which is the core function of Authentication.
Authentication answers the question 'Who are you?' by checking credentials.
2
Identify the AAA pillar responsible for enforcing permissions and command restrictions.
Controlling command access and restricting operational privileges maps to Authorization.
Authorization answers the question 'What are you allowed to do?' after identity has been established.
3
Identify the AAA pillar responsible for audit trailing and session metrics.
Recording timestamps, session statistics, and user activities maps to Accounting.
Accounting answers the question 'What did you do and for how long?' for compliance auditing.
4
Identify the security protocol characteristic involving full packet body encryption over TCP 49.
TCP port 49 transport with complete payload encryption is a defining feature of TACACS+.
Unlike RADIUS, which uses UDP and encrypts only the password field, TACACS+ encrypts the entire payload over TCP.

Anahtar Kavram

AAA Framework Functional Separation & TACACS+ vs RADIUS Architecture
Bu soruyu puanla

Konular

AAA Framework Concepts (Authentication, Authorization, Accounting)

Bu konudan daha fazla soru