200-201 Question 60
Select 3A company's cybersecurity operations team is implementing a solution to control access to its internal resources. They want to ensure that users are authenticated before accessing the network, assigned specific roles to determine what they can access, and their activities are logged for future review. Which combination of processes best meets these requirements?
- A
Authentication
- B
Encryption
- C
Authorization
- D
Accounting
- E
Firewall Configuration
Show answer and explanation
Correct answers: A, C, D
Explanation
The combination of Authentication, Authorization, and Accounting (AAA) is a framework commonly used to control access to resources in a secure manner. Authentication ensures that only legitimate users gain access, Authorization defines their permissions, and Accounting logs their activities for audits and troubleshooting. Together, these processes provide a comprehensive access control solution.
- A. Correct.
Authentication verifies the identity of a user, device, or process, ensuring that only legitimate entities can access the network. This is a necessary step to control access.
- B. Incorrect.
Encryption is used to secure data during transmission or storage, but it does not directly address access control or logging of activities.
- C. Correct.
Authorization determines the permissions or level of access a user has after being authenticated. This ensures that users can only access the resources they are allowed to.
- D. Correct.
Accounting involves tracking user actions, such as login attempts or access to resources, providing a log for monitoring and auditing purposes.
- E. Incorrect.
Firewall configuration is related to network traffic control and protection but does not inherently involve user authentication, authorization, or accounting.