200-301 Question 446
Select 3A network administrator is configuring a network access control system for employees accessing sensitive resources. They need to ensure that users are first verified using their credentials, granted permissions based on their role (e.g., admin or guest), and that all actions are logged for auditing purposes. Which of the following correctly represents the concepts of authentication, authorization, and accounting in this scenario?
- A
Authentication verifies the user's identity through credentials such as a username and password.
- B
Authorization determines what a user is allowed to do based on their role or permissions.
- C
Accounting ensures that all user actions are logged and can be reviewed later.
- D
Authentication logs the user's activity for auditing purposes.
- E
Authorization verifies the user's identity before granting access to the system.
Show answer and explanation
Correct answers: A, B, C
Explanation
The concepts of authentication, authorization, and accounting (AAA) are foundational to network security. Authentication ensures that a user's identity is verified, authorization determines what actions the user is permitted to perform, and accounting tracks all activities for auditing purposes. These processes work together to secure network resources and provide accountability.
- A. Correct.
Authentication is the process of verifying the user's identity, typically through a username and password or other credentials. This is a correct statement.
- B. Correct.
Authorization refers to determining what a user is allowed to do after their identity is authenticated. This correctly describes authorization in this scenario.
- C. Correct.
Accounting involves tracking and logging user actions for auditing and reporting purposes. This is a correct description of accounting.
- D. Incorrect.
This is incorrect because authentication does not involve logging user activity. Logging is part of accounting.
- E. Incorrect.
This is incorrect because authorization does not verify the user's identity. Verifying identity is the role of authentication.