Soru

Zorluk: KolayAuthentication, Authorization, and Accounting (AAA)

A system administrator is reviewing log retention policies and system auditing controls to ensure compliance with AAA principles. Which of the following tasks specifically perform the Accounting function of AAA? (Select TWO.)

  1. Tracking session duration and data bandwidth consumed by remote VPN usersCevap
  2. Logging specific command-line entries executed by administrators during an active sessionCevap
  3. C
    Validating an employee's username and time-based one-time password (TOTP)
  4. D
    Configuring role-based privileges to restrict access to sensitive HR folders

Cevap

Tracking session duration and data bandwidth consumed by remote VPN users, and logging specific command-line entries executed by administrators during an active session.
Accounting measures resource consumption and creates audit logs of actions performed during a session, such as bandwidth utilization, connection length, and commands executed.

Adım Adım Çözüm

1
Define the primary responsibility of the Accounting pillar in AAA.
Accounting provides logging, metric tracking, auditing, and non-repudiation for user and system activity.
AAA separates establishing identity (Authentication), determining permissions (Authorization), and recording activity (Accounting).
2
Evaluate each provided security activity against the Accounting function.
Tracking usage metrics and creating command audit logs record actual user activity. Credential verification is Authentication, and setting folder permissions is Authorization.
Only actions that collect metrics or record event logs fall under Accounting.

Anahtar Kavram

Accounting (Auditing, Logging, and Resource Tracking)
Bu soruyu puanla