Examkin

Soru

Zorluk: ZorAuthentication, Authorization, and Accounting (AAA)

An enterprise network security team deploys a centralized RADIUS architecture to manage access to infrastructure devices. During a post-implementation audit, a security analyst notes the following behavior: when network administrators log in, the system successfully validates their multi-factor credentials. However, upon login, all authenticated administrators are granted identical, unrestricted administrative permissions across all switches and firewalls, regardless of their specific role or group membership in the directory service. Meanwhile, session start/end timestamps and data transfer metrics are accurately recorded in central logs. Which component of the AAA framework failed to be properly configured to restrict administrative privileges?

  1. Authorization controls enforcing role-based access limitsCevap
  2. B
    Authentication mechanisms validating user identity credentials
  3. C
    Accounting processes tracking user activity and session metrics
  4. D
    Perimeter defense controls establishing implicit internal trust

Cevap

Authorization controls enforcing role-based access limits
Authorization is the AAA pillar responsible for granting or denying access rights and privileges to resources once an identity is verified. In this scenario, credentials are confirmed (Authentication) and sessions are logged (Accounting), but permissions are unconstrained due to missing or misconfigured role-based authorization controls.

Adım Adım Çözüm

1
Analyze the AAA functions described in the enterprise scenario
Identity verification via multi-factor credentials succeeds (Authentication is functional). Session tracking and log metrics are recorded (Accounting is functional).
Differentiating between identity verification, permission granting, and logging is required to isolate the failure.
2
Identify the misconfiguration in permission assignment
All authenticated identities receive universal full access without evaluating specific user roles or directory attributes.
Determining permissions and enforcing principle of least privilege is the explicit responsibility of the Authorization pillar.
3
Select the missing or misconfigured AAA pillar
Authorization controls failed to enforce role-based access boundaries.
Without proper authorization policies (such as RADIUS VSAs or TACACS+ command authorization rules), authentication alone results in over-privileged access.

Anahtar Kavram

Role-based Authorization within AAA Framework
Bu soruyu puanla

Konular

Authentication, Authorization, and Accounting (AAA)

Bu konudan daha fazla soru