100-150 Question 277
Select 2A company is concerned about unauthorized access to its internal network. They decide to implement a solution that ensures only authorized users can access resources and that login attempts are logged. Additionally, they want to enhance the security of user authentication by requiring a second factor, such as a mobile app code. Which combination of technologies should the company implement to meet these requirements?
- A
Authentication, Authorization, and Accounting (AAA)
- B
Multifactor Authentication (MFA)
- C
Encryption and digital certificates
- D
Confidentiality, Integrity, and Availability (CIA)
Show answer and explanation
Correct answers: A, B
Explanation
To meet the company’s requirements for controlling access, logging activities, and enhancing authentication security, implementing AAA ensures user access control and logging, while MFA adds an additional layer of security to the authentication process. Together, these technologies address the concerns described in the scenario.
- A. Correct.
Authentication, Authorization, and Accounting (AAA) is a framework that ensures users are authenticated (identity verification), authorized (granted access based on permissions), and that their actions are logged for accountability. This directly addresses the need for access control and logging.
- B. Correct.
Multifactor Authentication (MFA) enhances user authentication by requiring multiple forms of verification, such as a password and a mobile app code. This adds an extra layer of security to prevent unauthorized access.
- C. Incorrect.
Encryption and digital certificates are important for securing data in transit or at rest, but they do not directly address user access control or logging requirements in this scenario.
- D. Incorrect.
Confidentiality, Integrity, and Availability (CIA) is a security model that ensures data protection, but it is not a specific technology or framework used to control access or log user activities.