Examkin

Soru

Zorluk: OrtaAuthentication, Authorization, and Accounting (AAA)

A network administrator is reviewing access management logs on a remote access VPN gateway. The logs indicate that after a user successfully presents a valid username, password, and time-based one-time password (TOTP), the gateway queries an LDAP directory to check the user's assigned group memberships and determine which specific internal subnets the user is permitted to reach. Which pillar of the AAA framework is being executed during this group membership evaluation?

  1. AuthorizationCevap
  2. B
    Authentication
  3. C
    Accounting
  4. D
    Non-repudiation

Cevap

Authorization is the pillar of the AAA framework executed when evaluating group membership to grant or restrict access to network resources.
Authorization is responsible for determining permissions and enforcing access policies for an authenticated identity. Checking group membership to grant access to specific subnets directly fulfills the authorization pillar.

Adım Adım Çözüm

1
Analyze the action described in the scenario
The system validates group memberships to determine permitted subnets after identity credentials have already been verified.
Separating identity verification from permission assignment is fundamental to understanding AAA.
2
Map the specific technical action to AAA pillars
Credential presentation (username/password/TOTP) = Authentication; Policy check for resource rights (subnet permissions) = Authorization; Log generation/session tracking = Accounting.
Authorization explicitly defines the rights, privileges, and boundaries granted to a verified identity.

Anahtar Kavram

Authentication, Authorization, and Accounting (AAA) Functional Boundaries
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Authentication, Authorization, and Accounting (AAA)

Bu konudan daha fazla soru