Examkin

Soru

Zorluk: OrtaAuthentication, Authorization, and Accounting (AAA)

During a network infrastructure assessment, a security analyst reviews the operational workflow of a centralized 802.1X RADIUS deployment. When an employee connects a corporate laptop to an enterprise switch port, the RADIUS server first verifies the user's domain password against Active Directory. Immediately following identity verification, the RADIUS server returns specific network access attributes that instruct the switch to dynamically place the user's connection onto VLAN 30 (Finance). Which pillar of the AAA framework is directly performed by dynamically placing the user into VLAN 30?

  1. A
    Authentication
  2. AuthorizationCevap
  3. C
    Accounting
  4. D
    Perimeter Trust

Cevap

Authorization
Authorization is the process of granting specific permissions, privileges, and network access limits to an authenticated entity. In this scenario, placing the connection into VLAN 30 enforces role-based access privileges, making it a direct application of authorization.

Adım Adım Çözüm

1
Identify the distinct phases of the AAA framework described in the scenario
The initial step (verifying domain credentials against Active Directory) establishes identity, which is Authentication. The subsequent step (assigning VLAN 30 attributes) defines what resources the validated user is permitted to access.
AAA separates identity verification from permission assignment and tracking.
2
Map the dynamic VLAN 30 assignment to the corresponding AAA pillar
Restricting network access rights based on user role attributes corresponds to Authorization.
Authorization defines access privileges, network segmentation restrictions, and resource boundaries.

Anahtar Kavram

Authentication, Authorization, and Accounting (AAA) Framework
Bu soruyu puanla

Konular

Authentication, Authorization, and Accounting (AAA)

Bu konudan daha fazla soru