Examkin

Soru

Zorluk: OrtaAuthentication, Authorization, and Accounting (AAA)

A network engineer notices that users connecting to the enterprise Wi-Fi are successfully validating their domain credentials against a centralized RADIUS server. However, after successful login, all users—including system administrators—are placed into a restricted guest VLAN instead of being assigned their appropriate department VLANs. Which aspect of the AAA framework is failing to execute correctly in this scenario?

  1. Assigning dynamic network access rights and group privileges upon successful identificationCevap
  2. B
    Validating user credentials against the centralized directory service
  3. C
    Recording log entries of user session durations and resource consumption
  4. D
    Establishing implicit trust for all authenticated internal network traffic

Cevap

Assigning dynamic network access rights and group privileges upon successful identification
The scenario describes a successful authentication phase where the RADIUS server validates credentials. However, the system fails during the authorization phase because it does not apply role-based access rules or assign the correct network attributes (such as VLAN IDs) based on user permissions.

Adım Adım Çözüm

1
Analyze the AAA phase results in the scenario.
Domain credential validation against RADIUS succeeded, confirming authentication is working.
Authentication verifies identity, which occurred without error.
2
Identify the point of failure after login.
Users are incorrectly assigned to a restricted guest VLAN regardless of their group roles.
Determining what resources or network segments a user can access post-login is authorization.
3
Match the failed function to the correct AAA component.
The failure to grant appropriate VLAN permissions is an authorization failure.
Authorization enforces access rights based on identity and policy.

Anahtar Kavram

Distinction between Authentication (verifying identity) and Authorization (granting permissions/access)
Bu soruyu puanla

Konular

Authentication, Authorization, and Accounting (AAA)

Bu konudan daha fazla soru