Examkin

Soru

Zorluk: OrtaAuthentication, Authorization, and Accounting (AAA)

An enterprise security administrator is auditing network infrastructure logs to verify full implementation of the Authentication, Authorization, and Accounting (AAA) framework. Which of the following technical controls directly perform Accounting functions? (Select TWO).

  1. Logging connection start times, disconnect timestamps, and total bandwidth consumed by remote users.Cevap
  2. Recording command-line interface (CLI) statements executed by network engineers during active SSH management sessions.Cevap
  3. C
    Validating user credentials against a centralized LDAP directory using time-based one-time passwords.
  4. D
    Restricting user network access by applying VLAN filters based on Active Directory group membership.

Cevap

The controls that satisfy the Accounting pillar are logging connection start times, disconnect timestamps, and bandwidth consumed, as well as recording command-line interface (CLI) statements executed by network engineers.
Accounting focuses on tracking resource utilization, user actions, and session data. Recording session timestamps, bandwidth, and specific commands executed on infrastructure devices creates an accountable audit trail.

Adım Adım Çözüm

1
Define the specific operational role of the Accounting pillar in AAA.
Accounting tracks user activity, session statistics, resource usage, and audit logs to ensure non-repudiation and oversight.
Categorizing the AAA pillars isolates tracking mechanisms from identity checks and access enforcement.
2
Analyze each proposed technical control against the Accounting definition.
Logging bandwidth/timestamps and recording executed CLI commands capture activity logs and metrics (Accounting). Validating credentials proves identity (Authentication), and applying VLAN filters restricts access rights (Authorization).
Only mechanisms that monitor, measure, and record active usage fulfill the Accounting objective.

Anahtar Kavram

Authentication, Authorization, and Accounting (AAA)
Bu soruyu puanla

Konular

Authentication, Authorization, and Accounting (AAA)

Bu konudan daha fazla soru